openbsd/src/lib/libtls/man/tls_load_file.3, branch OPENBSD_7_9

.Lb libtls libssl libcrypto

2025-07-07T10:54:00+00:00

OK tb@ and no objection from tedu@

contibutions -> contributions

2022-01-01T02:18:28+00:00

zap wonky commas;

2021-06-22T20:01:19+00:00

Clarify tls_config_set_*_file() file I/O semantics

2021-06-22T17:59:48+00:00

tls_config_set_*_file(3) do not just set the file paths like tls_config_set_*_path(3) do, they do load the given file(s) into memory directly using tls_config_load_file(). This distinction is important because it means a later tls_connect(3) will not do any file I/O (at least wrt. those files), which is relevant when for example pleding without "[rwc]path" after loading files into memory and before doing tls_connect(3). The manual's current wording made me use the following due to above way of pledging a program: tls_load_file() tls_config_set_ca_mem() tls_unload_file() While in fact a single tls_config_set_ca_file() call does the same. tls_config.c r1.26 (Aug 2016) change the code but forgot to amend the manual as noted by tb, thanks. Feedback OK tb

expose the default cert file as a function, not a define. it's really

2018-11-29T14:24:23+00:00

an internal detail of the library, so the string should live inside it, not in the application code. ok jsing

typo in argument type, from Mario dot Andres dot Campos at gmail dot com

2018-08-21T00:35:55+00:00

hyphenate DER/PEM-encoded, for consistency;

2017-10-08T06:56:36+00:00

correct function name;

2017-08-01T08:41:36+00:00

from carlos cardenas

Document tls_config_set_crl_file() and tls_config_set_crl_mem().

2017-07-06T17:27:19+00:00

Based on a diff from Jack Burton , thanks!

Document tls_unload_file().

2017-05-06T21:06:19+00:00