summaryrefslogtreecommitdiff
path: root/src/lib/libssl/man/SSL_CTX_set_options.3
diff options
context:
space:
mode:
authorjmc <>2021-06-11 19:45:21 +0000
committerjmc <>2021-06-11 19:45:21 +0000
commit1ab79cf05f96f2cf024f9e418d9abd85a90316f9 (patch)
tree463902f98da06dd3a3f213415dbf11980558b59e /src/lib/libssl/man/SSL_CTX_set_options.3
parent25b5c080aa64e34d31477c1bcf914d3ad678bad8 (diff)
downloadopenbsd-1ab79cf05f96f2cf024f9e418d9abd85a90316f9.tar.gz
openbsd-1ab79cf05f96f2cf024f9e418d9abd85a90316f9.tar.bz2
openbsd-1ab79cf05f96f2cf024f9e418d9abd85a90316f9.zip
space between RFC and number;
Diffstat (limited to 'src/lib/libssl/man/SSL_CTX_set_options.3')
-rw-r--r--src/lib/libssl/man/SSL_CTX_set_options.38
1 files changed, 4 insertions, 4 deletions
diff --git a/src/lib/libssl/man/SSL_CTX_set_options.3 b/src/lib/libssl/man/SSL_CTX_set_options.3
index ed797da2d6..a0ec880a80 100644
--- a/src/lib/libssl/man/SSL_CTX_set_options.3
+++ b/src/lib/libssl/man/SSL_CTX_set_options.3
@@ -1,4 +1,4 @@
1.\" $OpenBSD: SSL_CTX_set_options.3,v 1.13 2021/04/15 16:35:54 tb Exp $ 1.\" $OpenBSD: SSL_CTX_set_options.3,v 1.14 2021/06/11 19:41:39 jmc Exp $
2.\" full merge up to: OpenSSL 7946ab33 Dec 6 17:56:41 2015 +0100 2.\" full merge up to: OpenSSL 7946ab33 Dec 6 17:56:41 2015 +0100
3.\" selective merge up to: OpenSSL edb79c3a Mar 29 10:07:14 2017 +1000 3.\" selective merge up to: OpenSSL edb79c3a Mar 29 10:07:14 2017 +1000
4.\" 4.\"
@@ -52,7 +52,7 @@
52.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 52.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
53.\" OF THE POSSIBILITY OF SUCH DAMAGE. 53.\" OF THE POSSIBILITY OF SUCH DAMAGE.
54.\" 54.\"
55.Dd $Mdocdate: April 15 2021 $ 55.Dd $Mdocdate: June 11 2021 $
56.Dt SSL_CTX_SET_OPTIONS 3 56.Dt SSL_CTX_SET_OPTIONS 3
57.Os 57.Os
58.Sh NAME 58.Sh NAME
@@ -175,7 +175,7 @@ preferences.
175When not set, the server will always follow the client's preferences. 175When not set, the server will always follow the client's preferences.
176When set, the server will choose following its own preferences. 176When set, the server will choose following its own preferences.
177.It Dv SSL_OP_COOKIE_EXCHANGE 177.It Dv SSL_OP_COOKIE_EXCHANGE
178Turn on Cookie Exchange as described in RFC4347 Section 4.2.1. 178Turn on Cookie Exchange as described in RFC 4347 Section 4.2.1.
179Only affects DTLS connections. 179Only affects DTLS connections.
180.It Dv SSL_OP_LEGACY_SERVER_CONNECT 180.It Dv SSL_OP_LEGACY_SERVER_CONNECT
181Allow legacy insecure renegotiation between OpenSSL and unpatched servers 181Allow legacy insecure renegotiation between OpenSSL and unpatched servers
@@ -250,7 +250,7 @@ and no longer have any effect:
250.Dv SSL_OP_TLSEXT_PADDING . 250.Dv SSL_OP_TLSEXT_PADDING .
251.Sh SECURE RENEGOTIATION 251.Sh SECURE RENEGOTIATION
252OpenSSL 0.9.8m and later always attempts to use secure renegotiation as 252OpenSSL 0.9.8m and later always attempts to use secure renegotiation as
253described in RFC5746. 253described in RFC 5746.
254This counters the prefix attack described in CVE-2009-3555 and elsewhere. 254This counters the prefix attack described in CVE-2009-3555 and elsewhere.
255.Pp 255.Pp
256This attack has far-reaching consequences which application writers should be 256This attack has far-reaching consequences which application writers should be