diff options
author | doug <> | 2015-07-17 15:50:37 +0000 |
---|---|---|
committer | doug <> | 2015-07-17 15:50:37 +0000 |
commit | 1dfd1cf6c439ce0e41c7f3ac112e6531381c6af7 (patch) | |
tree | feb649947db1c2e92858c29d6aa7029f188bfa9b /src/lib/libssl/doc/SSL_CTX_set_options.3 | |
parent | 489dbb57ee3abd9d28ef0c63007d420b6a34b1f4 (diff) | |
download | openbsd-1dfd1cf6c439ce0e41c7f3ac112e6531381c6af7.tar.gz openbsd-1dfd1cf6c439ce0e41c7f3ac112e6531381c6af7.tar.bz2 openbsd-1dfd1cf6c439ce0e41c7f3ac112e6531381c6af7.zip |
Remove compat hack that disabled ECDHE-ECDSA on OS X.
For a few old releases, ECDHE-ECDSA was broken on OS X. This option
cannot differentiate between working and broken OS X so it disabled
ECDHE-ECDSA support on all OS X >= 10.6. 10.8-10.8.3 were the faulty
releases but these are no longer relevant. Tested on OS X 10.10 by jsing.
ok jsing@
Diffstat (limited to 'src/lib/libssl/doc/SSL_CTX_set_options.3')
-rw-r--r-- | src/lib/libssl/doc/SSL_CTX_set_options.3 | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/src/lib/libssl/doc/SSL_CTX_set_options.3 b/src/lib/libssl/doc/SSL_CTX_set_options.3 index 922522a33c..91a1c9ad92 100644 --- a/src/lib/libssl/doc/SSL_CTX_set_options.3 +++ b/src/lib/libssl/doc/SSL_CTX_set_options.3 | |||
@@ -1,5 +1,5 @@ | |||
1 | .\" | 1 | .\" |
2 | .\" $OpenBSD: SSL_CTX_set_options.3,v 1.7 2015/07/17 07:04:40 doug Exp $ | 2 | .\" $OpenBSD: SSL_CTX_set_options.3,v 1.8 2015/07/17 15:50:37 doug Exp $ |
3 | .\" | 3 | .\" |
4 | .Dd $Mdocdate: July 17 2015 $ | 4 | .Dd $Mdocdate: July 17 2015 $ |
5 | .Dt SSL_CTX_SET_OPTIONS 3 | 5 | .Dt SSL_CTX_SET_OPTIONS 3 |
@@ -116,8 +116,9 @@ this option has no effect. | |||
116 | .It Dv SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER | 116 | .It Dv SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER |
117 | \&... | 117 | \&... |
118 | .It Dv SSL_OP_SAFARI_ECDHE_ECDSA_BUG | 118 | .It Dv SSL_OP_SAFARI_ECDHE_ECDSA_BUG |
119 | Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X. | 119 | As of |
120 | OS X 10.8..10.8.3 has broken support for ECDHE-ECDSA ciphers. | 120 | .Ox 5.8 , |
121 | this option has no effect. | ||
121 | .It Dv SSL_OP_SSLEAY_080_CLIENT_DH_BUG | 122 | .It Dv SSL_OP_SSLEAY_080_CLIENT_DH_BUG |
122 | As of | 123 | As of |
123 | .Ox 5.8 , | 124 | .Ox 5.8 , |