diff options
author | kn <> | 2021-01-02 19:15:04 +0000 |
---|---|---|
committer | kn <> | 2021-01-02 19:15:04 +0000 |
commit | eea0607dc228c0e4d186b5a5b0571ab1b3b65811 (patch) | |
tree | be6101bfc589714b82c33601be58761a2c611ab9 | |
parent | 55d8fce6872caffa61978d1827458d2f852e9b63 (diff) | |
download | openbsd-eea0607dc228c0e4d186b5a5b0571ab1b3b65811.tar.gz openbsd-eea0607dc228c0e4d186b5a5b0571ab1b3b65811.tar.bz2 openbsd-eea0607dc228c0e4d186b5a5b0571ab1b3b65811.zip |
Make list of DHE parameters more prominent
Follow the previous commit and complete the manual page for consistency;
better readable and tags for free.
OK tb
-rw-r--r-- | src/lib/libtls/man/tls_config_set_protocols.3 | 25 |
1 files changed, 19 insertions, 6 deletions
diff --git a/src/lib/libtls/man/tls_config_set_protocols.3 b/src/lib/libtls/man/tls_config_set_protocols.3 index 01f6369fe1..a636b06f4e 100644 --- a/src/lib/libtls/man/tls_config_set_protocols.3 +++ b/src/lib/libtls/man/tls_config_set_protocols.3 | |||
@@ -1,4 +1,4 @@ | |||
1 | .\" $OpenBSD: tls_config_set_protocols.3,v 1.9 2020/12/30 13:38:13 kn Exp $ | 1 | .\" $OpenBSD: tls_config_set_protocols.3,v 1.10 2021/01/02 19:15:04 kn Exp $ |
2 | .\" | 2 | .\" |
3 | .\" Copyright (c) 2014 Ted Unangst <tedu@openbsd.org> | 3 | .\" Copyright (c) 2014 Ted Unangst <tedu@openbsd.org> |
4 | .\" Copyright (c) 2015, 2016 Joel Sing <jsing@openbsd.org> | 4 | .\" Copyright (c) 2015, 2016 Joel Sing <jsing@openbsd.org> |
@@ -16,7 +16,7 @@ | |||
16 | .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF | 16 | .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF |
17 | .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. | 17 | .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. |
18 | .\" | 18 | .\" |
19 | .Dd $Mdocdate: December 30 2020 $ | 19 | .Dd $Mdocdate: January 2 2021 $ |
20 | .Dt TLS_CONFIG_SET_PROTOCOLS 3 | 20 | .Dt TLS_CONFIG_SET_PROTOCOLS 3 |
21 | .Os | 21 | .Os |
22 | .Sh NAME | 22 | .Sh NAME |
@@ -140,11 +140,24 @@ for further information. | |||
140 | .Fn tls_config_set_dheparams | 140 | .Fn tls_config_set_dheparams |
141 | specifies the parameters that will be used during Diffie-Hellman Ephemeral | 141 | specifies the parameters that will be used during Diffie-Hellman Ephemeral |
142 | (DHE) key exchange. | 142 | (DHE) key exchange. |
143 | Possible values are "none", "auto" and "legacy". | 143 | Possible values are: |
144 | In "auto" mode, the key size for the ephemeral key is automatically selected | 144 | .Pp |
145 | .Bl -tag -width "legacy" -offset indent -compact | ||
146 | .It Dv none | ||
147 | .It Dv auto | ||
148 | .It Dv legacy | ||
149 | .El | ||
150 | .Pp | ||
151 | In | ||
152 | .Dv auto | ||
153 | mode, the key size for the ephemeral key is automatically selected | ||
145 | based on the size of the private key being used for signing. | 154 | based on the size of the private key being used for signing. |
146 | In "legacy" mode, 1024 bit ephemeral keys are used. | 155 | In |
147 | The default value is "none", which disables DHE key exchange. | 156 | .Dv legacy |
157 | mode, 1024 bit ephemeral keys are used. | ||
158 | The default value is | ||
159 | .Dv none , | ||
160 | which disables DHE key exchange. | ||
148 | .Pp | 161 | .Pp |
149 | .Fn tls_config_set_ecdhecurves | 162 | .Fn tls_config_set_ecdhecurves |
150 | specifies the names of the elliptic curves that may be used during Elliptic | 163 | specifies the names of the elliptic curves that may be used during Elliptic |