summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorjmc <>2003-10-24 09:41:52 +0000
committerjmc <>2003-10-24 09:41:52 +0000
commitc9423a0615f6dadf73060eaa843ac7e53e8ce540 (patch)
tree475d5593877a12105861b9280fb6569f1cc899b8
parent21155d355a017a5944ad5021c96db75ed391d2b6 (diff)
downloadopenbsd-c9423a0615f6dadf73060eaa843ac7e53e8ce540.tar.gz
openbsd-c9423a0615f6dadf73060eaa843ac7e53e8ce540.tar.bz2
openbsd-c9423a0615f6dadf73060eaa843ac7e53e8ce540.zip
small update for CIPHERS;
-rw-r--r--src/usr.sbin/openssl/openssl.130
1 files changed, 15 insertions, 15 deletions
diff --git a/src/usr.sbin/openssl/openssl.1 b/src/usr.sbin/openssl/openssl.1
index cd6ba71ffa..b137d90f09 100644
--- a/src/usr.sbin/openssl/openssl.1
+++ b/src/usr.sbin/openssl/openssl.1
@@ -1,4 +1,4 @@
1.\" $OpenBSD: openssl.1,v 1.18 2003/10/22 16:05:06 jmc Exp $ 1.\" $OpenBSD: openssl.1,v 1.19 2003/10/24 09:41:52 jmc Exp $
2.\" ==================================================================== 2.\" ====================================================================
3.\" Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved. 3.\" Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved.
4.\" 4.\"
@@ -1312,19 +1312,27 @@ then even if a certificate is issued with CA:TRUE it will not be valid.
1312.\" 1312.\"
1313.Sh CIPHERS 1313.Sh CIPHERS
1314.Nm openssl ciphers 1314.Nm openssl ciphers
1315.Op Fl v 1315.Op Fl hv
1316.Op Fl ssl2 | ssl3 | tls1 1316.Op Fl ssl2 | ssl3 | tls1
1317.Op Ar cipherlist 1317.Op Ar cipherlist
1318.Pp 1318.Pp
1319The 1319The
1320.Nm cipherlist 1320.Nm ciphers
1321command converts 1321command converts
1322.Nm OpenSSL 1322.Nm OpenSSL
1323cipher lists into ordered SSL cipher preference lists. 1323cipher lists into ordered SSL cipher preference lists.
1324It can be used as a test tool to determine the appropriate cipherlist. 1324It can be used as a test tool to determine the appropriate cipherlist.
1325.Pp 1325.Pp
1326The options are as follows: 1326The options are as follows:
1327.Bl -tag -width "XXXX" 1327.Bl -tag -width "XXXXXX"
1328.It Fl h , \&?
1329Print a brief usage message.
1330.It Fl ssl2
1331Only include SSL v2 ciphers.
1332.It Fl ssl3
1333Only include SSL v3 ciphers.
1334.It Fl tls1
1335Only include TLS v1 ciphers.
1328.It Fl v 1336.It Fl v
1329Verbose option. 1337Verbose option.
1330List ciphers with a complete description of protocol version 1338List ciphers with a complete description of protocol version
@@ -1338,14 +1346,6 @@ Note that without the
1338option, ciphers may seem to appear twice in a cipher list; 1346option, ciphers may seem to appear twice in a cipher list;
1339this is when similar ciphers are available for 1347this is when similar ciphers are available for
1340SSL v2 and for SSL v3/TLS v1. 1348SSL v2 and for SSL v3/TLS v1.
1341.It Fl ssl2
1342Only include SSL v2 ciphers.
1343.It Fl ssl3
1344Only include SSL v3 ciphers.
1345.It Fl tls1
1346Only include TLS v1 ciphers.
1347.It Fl h , \&?
1348Print a brief usage message.
1349.It Ar cipherlist 1349.It Ar cipherlist
1350A cipher list to convert to a cipher preference list. 1350A cipher list to convert to a cipher preference list.
1351If it is not included, then the default cipher list will be used. 1351If it is not included, then the default cipher list will be used.
@@ -1439,7 +1439,7 @@ which is not included by
1439.Ar COMPLEMENTOFALL 1439.Ar COMPLEMENTOFALL
1440if necessary). 1440if necessary).
1441.It Ar ALL 1441.It Ar ALL
1442All ciphers suites except the 1442All cipher suites except the
1443.Ar eNULL 1443.Ar eNULL
1444ciphers which must be explicitly enabled. 1444ciphers which must be explicitly enabled.
1445.It Ar COMPLEMENTOFALL 1445.It Ar COMPLEMENTOFALL
@@ -1462,13 +1462,13 @@ algorithms, but excluding export cipher suites.
1462Export encryption algorithms. 1462Export encryption algorithms.
1463Including 40- and 56-bit algorithms. 1463Including 40- and 56-bit algorithms.
1464.It Ar EXPORT40 1464.It Ar EXPORT40
146540-bit export encryption algorithms 146540-bit export encryption algorithms.
1466.It Ar EXPORT56 1466.It Ar EXPORT56
146756-bit export encryption algorithms. 146756-bit export encryption algorithms.
1468.It Ar eNULL , NULL 1468.It Ar eNULL , NULL
1469The 1469The
1470.Qq NULL 1470.Qq NULL
1471ciphers; that is those offering no encryption. 1471ciphers; that is, those offering no encryption.
1472Because these offer no encryption at all and are a security risk, 1472Because these offer no encryption at all and are a security risk,
1473they are disabled unless explicitly included. 1473they are disabled unless explicitly included.
1474.It Ar aNULL 1474.It Ar aNULL