openbsd/src/usr.bin/openssl/ciphers.c, branch OPENBSD_7_9A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_92025-01-02T12:31:44+00:00openssl(1) doesn't need 6 .h files: fold progs.h into apps.h2025-01-02T12:31:44+00:00tb2025-01-02T12:31:44+00:00urn:sha1:8d0fcc0d460d9b0c35764534bef3e0d86dc8aab8
discussed with jsing
ciphers: remove tls1 and tls1_1 leftovers2024-12-11T12:18:05+00:00tb2024-12-11T12:18:05+00:00urn:sha1:4a69e5993df6d0040e5e8f4a2de040d77c1924e9
The options were already removed from the manual in 91e7614a.
From Renaud Allard (hand-applied since patch was mangled)
Rename struct ${app}_config to plain cfg2023-03-06T14:32:06+00:00tb2023-03-06T14:32:06+00:00urn:sha1:2ba7dcfcbc2ef5aaeb8eb14f36f83bd57c22bcae
All the structs are static and we need to reach into them many times.
Having a shorter name is more concise and results in less visual clutter.
It also avoids many overlong lines and we will be able to get rid of some
unfortunate line wrapping down the road.
Discussed with jsing
openssl: make all config structs static2023-03-05T13:12:53+00:00tb2023-03-05T13:12:53+00:00urn:sha1:526ac760d941819bc6d2eefe70bf7c9c5562bc26
These are per-app, so per-file. Most of them already are static, adjust
the rest of them.
Remove the legacy interactive mode from openssl(1).2022-11-11T17:07:39+00:00joshua2022-11-11T17:07:39+00:00urn:sha1:273d9e16fc9e481283c2b2302b348e4863e29f28
This removes the legacy interactive mode from openssl(1) since it is
rarely used, complicates the code, and has also been removed from
OpenSSL in version 3.x.x.
ok tb@ jsing@
fix indent2022-07-19T20:15:19+00:00tb2022-07-19T20:15:19+00:00urn:sha1:ec2e701cc9dc8074434759b4102c781a20adb990Allow displaying ciphers according to protocol version2022-07-19T16:07:35+00:00tb2022-07-19T16:07:35+00:00urn:sha1:fa292259e6e362d01a413d7edc7b87fc7320bc32
Instead of only using the default client method, allow selecting a
specific protocol version and display the supported ciphers accordingly.
This removes the noop status of -tls1 and adds -tls1_{1,2,3} as in
other commands.
ok jsing
Suppress output of the deprecated -tls1 option in usage() and help2022-07-14T08:37:17+00:00tb2022-07-14T08:37:17+00:00urn:sha1:42cdb27449a5dea8427c2e629c71dbc67da73764
output. The option wasn't documented in the manpage.
pointed out by jsing
Switch to using TLS_client_method()2022-07-14T08:35:15+00:00tb2022-07-14T08:35:15+00:00urn:sha1:2cd23025bcedc88c4f159649f91ce257fc79dd3a
Apparently, TLSv1_client_method() is used for historical reasons.
This behavior is no longer helpful if we want to know what ciphers
a TLS connection could use. This could change again after further
investigation of what the behavior should be...
ok beck jsing
Add -s option to openssl ciphers2022-07-14T08:07:54+00:00tb2022-07-14T08:07:54+00:00urn:sha1:dbd1b59b8e7f5c3d892e3fba855035c344fad63c
With this option, the command only shows the ciphers supported by the
SSL method.
ok beck jsing