summaryrefslogtreecommitdiff
path: root/src/lib/libssl/doc/SSL_CTX_set_options.3
diff options
context:
space:
mode:
authordoug <>2015-07-17 15:50:37 +0000
committerdoug <>2015-07-17 15:50:37 +0000
commit1dfd1cf6c439ce0e41c7f3ac112e6531381c6af7 (patch)
treefeb649947db1c2e92858c29d6aa7029f188bfa9b /src/lib/libssl/doc/SSL_CTX_set_options.3
parent489dbb57ee3abd9d28ef0c63007d420b6a34b1f4 (diff)
downloadopenbsd-1dfd1cf6c439ce0e41c7f3ac112e6531381c6af7.tar.gz
openbsd-1dfd1cf6c439ce0e41c7f3ac112e6531381c6af7.tar.bz2
openbsd-1dfd1cf6c439ce0e41c7f3ac112e6531381c6af7.zip
Remove compat hack that disabled ECDHE-ECDSA on OS X.
For a few old releases, ECDHE-ECDSA was broken on OS X. This option cannot differentiate between working and broken OS X so it disabled ECDHE-ECDSA support on all OS X >= 10.6. 10.8-10.8.3 were the faulty releases but these are no longer relevant. Tested on OS X 10.10 by jsing. ok jsing@
Diffstat (limited to 'src/lib/libssl/doc/SSL_CTX_set_options.3')
-rw-r--r--src/lib/libssl/doc/SSL_CTX_set_options.37
1 files changed, 4 insertions, 3 deletions
diff --git a/src/lib/libssl/doc/SSL_CTX_set_options.3 b/src/lib/libssl/doc/SSL_CTX_set_options.3
index 922522a33c..91a1c9ad92 100644
--- a/src/lib/libssl/doc/SSL_CTX_set_options.3
+++ b/src/lib/libssl/doc/SSL_CTX_set_options.3
@@ -1,5 +1,5 @@
1.\" 1.\"
2.\" $OpenBSD: SSL_CTX_set_options.3,v 1.7 2015/07/17 07:04:40 doug Exp $ 2.\" $OpenBSD: SSL_CTX_set_options.3,v 1.8 2015/07/17 15:50:37 doug Exp $
3.\" 3.\"
4.Dd $Mdocdate: July 17 2015 $ 4.Dd $Mdocdate: July 17 2015 $
5.Dt SSL_CTX_SET_OPTIONS 3 5.Dt SSL_CTX_SET_OPTIONS 3
@@ -116,8 +116,9 @@ this option has no effect.
116.It Dv SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER 116.It Dv SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER
117\&... 117\&...
118.It Dv SSL_OP_SAFARI_ECDHE_ECDSA_BUG 118.It Dv SSL_OP_SAFARI_ECDHE_ECDSA_BUG
119Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X. 119As of
120OS X 10.8..10.8.3 has broken support for ECDHE-ECDSA ciphers. 120.Ox 5.8 ,
121this option has no effect.
121.It Dv SSL_OP_SSLEAY_080_CLIENT_DH_BUG 122.It Dv SSL_OP_SSLEAY_080_CLIENT_DH_BUG
122As of 123As of
123.Ox 5.8 , 124.Ox 5.8 ,