diff options
| author | jmc <> | 2003-10-24 09:41:52 +0000 |
|---|---|---|
| committer | jmc <> | 2003-10-24 09:41:52 +0000 |
| commit | c9423a0615f6dadf73060eaa843ac7e53e8ce540 (patch) | |
| tree | 475d5593877a12105861b9280fb6569f1cc899b8 | |
| parent | 21155d355a017a5944ad5021c96db75ed391d2b6 (diff) | |
| download | openbsd-c9423a0615f6dadf73060eaa843ac7e53e8ce540.tar.gz openbsd-c9423a0615f6dadf73060eaa843ac7e53e8ce540.tar.bz2 openbsd-c9423a0615f6dadf73060eaa843ac7e53e8ce540.zip | |
small update for CIPHERS;
Diffstat (limited to '')
| -rw-r--r-- | src/usr.sbin/openssl/openssl.1 | 30 |
1 files changed, 15 insertions, 15 deletions
diff --git a/src/usr.sbin/openssl/openssl.1 b/src/usr.sbin/openssl/openssl.1 index cd6ba71ffa..b137d90f09 100644 --- a/src/usr.sbin/openssl/openssl.1 +++ b/src/usr.sbin/openssl/openssl.1 | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | .\" $OpenBSD: openssl.1,v 1.18 2003/10/22 16:05:06 jmc Exp $ | 1 | .\" $OpenBSD: openssl.1,v 1.19 2003/10/24 09:41:52 jmc Exp $ |
| 2 | .\" ==================================================================== | 2 | .\" ==================================================================== |
| 3 | .\" Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved. | 3 | .\" Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved. |
| 4 | .\" | 4 | .\" |
| @@ -1312,19 +1312,27 @@ then even if a certificate is issued with CA:TRUE it will not be valid. | |||
| 1312 | .\" | 1312 | .\" |
| 1313 | .Sh CIPHERS | 1313 | .Sh CIPHERS |
| 1314 | .Nm openssl ciphers | 1314 | .Nm openssl ciphers |
| 1315 | .Op Fl v | 1315 | .Op Fl hv |
| 1316 | .Op Fl ssl2 | ssl3 | tls1 | 1316 | .Op Fl ssl2 | ssl3 | tls1 |
| 1317 | .Op Ar cipherlist | 1317 | .Op Ar cipherlist |
| 1318 | .Pp | 1318 | .Pp |
| 1319 | The | 1319 | The |
| 1320 | .Nm cipherlist | 1320 | .Nm ciphers |
| 1321 | command converts | 1321 | command converts |
| 1322 | .Nm OpenSSL | 1322 | .Nm OpenSSL |
| 1323 | cipher lists into ordered SSL cipher preference lists. | 1323 | cipher lists into ordered SSL cipher preference lists. |
| 1324 | It can be used as a test tool to determine the appropriate cipherlist. | 1324 | It can be used as a test tool to determine the appropriate cipherlist. |
| 1325 | .Pp | 1325 | .Pp |
| 1326 | The options are as follows: | 1326 | The options are as follows: |
| 1327 | .Bl -tag -width "XXXX" | 1327 | .Bl -tag -width "XXXXXX" |
| 1328 | .It Fl h , \&? | ||
| 1329 | Print a brief usage message. | ||
| 1330 | .It Fl ssl2 | ||
| 1331 | Only include SSL v2 ciphers. | ||
| 1332 | .It Fl ssl3 | ||
| 1333 | Only include SSL v3 ciphers. | ||
| 1334 | .It Fl tls1 | ||
| 1335 | Only include TLS v1 ciphers. | ||
| 1328 | .It Fl v | 1336 | .It Fl v |
| 1329 | Verbose option. | 1337 | Verbose option. |
| 1330 | List ciphers with a complete description of protocol version | 1338 | List ciphers with a complete description of protocol version |
| @@ -1338,14 +1346,6 @@ Note that without the | |||
| 1338 | option, ciphers may seem to appear twice in a cipher list; | 1346 | option, ciphers may seem to appear twice in a cipher list; |
| 1339 | this is when similar ciphers are available for | 1347 | this is when similar ciphers are available for |
| 1340 | SSL v2 and for SSL v3/TLS v1. | 1348 | SSL v2 and for SSL v3/TLS v1. |
| 1341 | .It Fl ssl2 | ||
| 1342 | Only include SSL v2 ciphers. | ||
| 1343 | .It Fl ssl3 | ||
| 1344 | Only include SSL v3 ciphers. | ||
| 1345 | .It Fl tls1 | ||
| 1346 | Only include TLS v1 ciphers. | ||
| 1347 | .It Fl h , \&? | ||
| 1348 | Print a brief usage message. | ||
| 1349 | .It Ar cipherlist | 1349 | .It Ar cipherlist |
| 1350 | A cipher list to convert to a cipher preference list. | 1350 | A cipher list to convert to a cipher preference list. |
| 1351 | If it is not included, then the default cipher list will be used. | 1351 | If it is not included, then the default cipher list will be used. |
| @@ -1439,7 +1439,7 @@ which is not included by | |||
| 1439 | .Ar COMPLEMENTOFALL | 1439 | .Ar COMPLEMENTOFALL |
| 1440 | if necessary). | 1440 | if necessary). |
| 1441 | .It Ar ALL | 1441 | .It Ar ALL |
| 1442 | All ciphers suites except the | 1442 | All cipher suites except the |
| 1443 | .Ar eNULL | 1443 | .Ar eNULL |
| 1444 | ciphers which must be explicitly enabled. | 1444 | ciphers which must be explicitly enabled. |
| 1445 | .It Ar COMPLEMENTOFALL | 1445 | .It Ar COMPLEMENTOFALL |
| @@ -1462,13 +1462,13 @@ algorithms, but excluding export cipher suites. | |||
| 1462 | Export encryption algorithms. | 1462 | Export encryption algorithms. |
| 1463 | Including 40- and 56-bit algorithms. | 1463 | Including 40- and 56-bit algorithms. |
| 1464 | .It Ar EXPORT40 | 1464 | .It Ar EXPORT40 |
| 1465 | 40-bit export encryption algorithms | 1465 | 40-bit export encryption algorithms. |
| 1466 | .It Ar EXPORT56 | 1466 | .It Ar EXPORT56 |
| 1467 | 56-bit export encryption algorithms. | 1467 | 56-bit export encryption algorithms. |
| 1468 | .It Ar eNULL , NULL | 1468 | .It Ar eNULL , NULL |
| 1469 | The | 1469 | The |
| 1470 | .Qq NULL | 1470 | .Qq NULL |
| 1471 | ciphers; that is those offering no encryption. | 1471 | ciphers; that is, those offering no encryption. |
| 1472 | Because these offer no encryption at all and are a security risk, | 1472 | Because these offer no encryption at all and are a security risk, |
| 1473 | they are disabled unless explicitly included. | 1473 | they are disabled unless explicitly included. |
| 1474 | .It Ar aNULL | 1474 | .It Ar aNULL |
