summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorschwarze <>2017-08-21 09:41:15 +0000
committerschwarze <>2017-08-21 09:41:15 +0000
commit506970f259060e0119582ec8ae7af45977d56344 (patch)
tree63d4f6198e58ed4f60149e5f6a763ac71d5038e5
parentea008625593a2f223923deaae8fd34bffb6a0a9b (diff)
downloadopenbsd-506970f259060e0119582ec8ae7af45977d56344.tar.gz
openbsd-506970f259060e0119582ec8ae7af45977d56344.tar.bz2
openbsd-506970f259060e0119582ec8ae7af45977d56344.zip
merge the applicable parts of SSL_set_tlsext_host_name(3) documentation;
from Paul Yang <yang dot yang at baishancloud dot com> via OpenSSL commit 190b9a03 Jun 28 15:46:13 2017 +0800
-rw-r--r--src/lib/libssl/man/SSL_CTX_set_tlsext_servername_callback.332
1 files changed, 28 insertions, 4 deletions
diff --git a/src/lib/libssl/man/SSL_CTX_set_tlsext_servername_callback.3 b/src/lib/libssl/man/SSL_CTX_set_tlsext_servername_callback.3
index fc0e4536aa..790954266c 100644
--- a/src/lib/libssl/man/SSL_CTX_set_tlsext_servername_callback.3
+++ b/src/lib/libssl/man/SSL_CTX_set_tlsext_servername_callback.3
@@ -1,7 +1,9 @@
1.\" $OpenBSD: SSL_CTX_set_tlsext_servername_callback.3,v 1.1 2017/04/10 13:05:06 schwarze Exp $ 1.\" $OpenBSD: SSL_CTX_set_tlsext_servername_callback.3,v 1.2 2017/08/21 09:41:15 schwarze Exp $
2.\" OpenSSL 190b9a03 Jun 28 15:46:13 2017 +0800
2.\" OpenSSL 8c55c461 Mar 29 08:34:37 2017 +1000 3.\" OpenSSL 8c55c461 Mar 29 08:34:37 2017 +1000
3.\" 4.\"
4.\" This file was written by Jon Spillett <jon.spillett@oracle.com> 5.\" This file was written by Jon Spillett <jon.spillett@oracle.com>
6.\" and Paul Yang <yang dot yang at baishancloud dot com>.
5.\" Copyright (c) 2000 The OpenSSL Project. All rights reserved. 7.\" Copyright (c) 2000 The OpenSSL Project. All rights reserved.
6.\" 8.\"
7.\" Redistribution and use in source and binary forms, with or without 9.\" Redistribution and use in source and binary forms, with or without
@@ -48,14 +50,15 @@
48.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 50.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
49.\" OF THE POSSIBILITY OF SUCH DAMAGE. 51.\" OF THE POSSIBILITY OF SUCH DAMAGE.
50.\" 52.\"
51.Dd $Mdocdate: April 10 2017 $ 53.Dd $Mdocdate: August 21 2017 $
52.Dt SSL_CTX_SET_TLSEXT_SERVERNAME_CALLBACK 3 54.Dt SSL_CTX_SET_TLSEXT_SERVERNAME_CALLBACK 3
53.Os 55.Os
54.Sh NAME 56.Sh NAME
55.Nm SSL_CTX_set_tlsext_servername_callback , 57.Nm SSL_CTX_set_tlsext_servername_callback ,
56.Nm SSL_CTX_set_tlsext_servername_arg , 58.Nm SSL_CTX_set_tlsext_servername_arg ,
57.Nm SSL_get_servername_type , 59.Nm SSL_get_servername_type ,
58.Nm SSL_get_servername 60.Nm SSL_get_servername ,
61.Nm SSL_set_tlsext_host_name
59.Nd handle server name indication (SNI) 62.Nd handle server name indication (SNI)
60.Sh SYNOPSIS 63.Sh SYNOPSIS
61.In openssl/ssl.h 64.In openssl/ssl.h
@@ -78,6 +81,11 @@
78.Fo SSL_get_servername_type 81.Fo SSL_get_servername_type
79.Fa "const SSL *s" 82.Fa "const SSL *s"
80.Fc 83.Fc
84.Ft int
85.Fo SSL_set_tlsext_host_name
86.Fa "const SSL *s"
87.Fa "const char *name"
88.Fc
81.Sh DESCRIPTION 89.Sh DESCRIPTION
82.Fn SSL_CTX_set_tlsext_servername_callback 90.Fn SSL_CTX_set_tlsext_servername_callback
83sets the application callback 91sets the application callback
@@ -97,7 +105,20 @@ value is a pointer which is passed to the application callback.
97sets a context-specific argument to be passed into the callback for 105sets a context-specific argument to be passed into the callback for
98.Fa ctx . 106.Fa ctx .
99.Pp 107.Pp
100Both functions are implemented as macros. 108.Fn SSL_set_tlsext_host_name
109sets the server name indication ClientHello extension
110to contain the value
111.Fa name ,
112or clears it if
113.Fa name
114is
115.Dv NULL .
116The type of server name indication
117extension is set to
118.Dv TLSEXT_NAMETYPE_host_name
119as defined in RFC 3546.
120.Pp
121All three functions are implemented as macros.
101.Pp 122.Pp
102The ALPN and SNI callbacks are both executed during Client Hello 123The ALPN and SNI callbacks are both executed during Client Hello
103processing. 124processing.
@@ -119,6 +140,9 @@ otherwise.
119returns the servername type or -1 if no servername is present. 140returns the servername type or -1 if no servername is present.
120Currently the only supported type (defined in RFC 3546) is 141Currently the only supported type (defined in RFC 3546) is
121.Dv TLSEXT_NAMETYPE_host_name . 142.Dv TLSEXT_NAMETYPE_host_name .
143.Pp
144.Fn SSL_set_tlsext_host_name
145returns 1 on success or 0 in case of an error.
122.Sh SEE ALSO 146.Sh SEE ALSO
123.Xr SSL_CTX_callback_ctrl 3 , 147.Xr SSL_CTX_callback_ctrl 3 ,
124.Xr SSL_CTX_set_alpn_select_cb 3 148.Xr SSL_CTX_set_alpn_select_cb 3