summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--src/lib/libtls/man/tls_config_ocsp_require_stapling.311
-rw-r--r--src/lib/libtls/man/tls_load_file.39
2 files changed, 8 insertions, 12 deletions
diff --git a/src/lib/libtls/man/tls_config_ocsp_require_stapling.3 b/src/lib/libtls/man/tls_config_ocsp_require_stapling.3
index b8b7600904..a0694d304f 100644
--- a/src/lib/libtls/man/tls_config_ocsp_require_stapling.3
+++ b/src/lib/libtls/man/tls_config_ocsp_require_stapling.3
@@ -1,4 +1,4 @@
1.\" $OpenBSD: tls_config_ocsp_require_stapling.3,v 1.4 2017/01/31 16:18:57 beck Exp $ 1.\" $OpenBSD: tls_config_ocsp_require_stapling.3,v 1.5 2017/01/31 20:53:50 jmc Exp $
2.\" 2.\"
3.\" Copyright (c) 2016 Bob Beck <beck@openbsd.org> 3.\" Copyright (c) 2016 Bob Beck <beck@openbsd.org>
4.\" 4.\"
@@ -18,21 +18,18 @@
18.Dt TLS_CONFIG_OCSP_REQUIRE_STAPLING 3 18.Dt TLS_CONFIG_OCSP_REQUIRE_STAPLING 3
19.Os 19.Os
20.Sh NAME 20.Sh NAME
21.Nm tls_config_ocsp_require_stapling , 21.Nm tls_config_ocsp_require_stapling
22.Nd OCSP configuration for libtls 22.Nd OCSP configuration for libtls
23.Sh SYNOPSIS 23.Sh SYNOPSIS
24.In tls.h 24.In tls.h
25.Ft void 25.Ft void
26.Fn tls_config_ocsp_require_stapling "struct tls_config *config" 26.Fn tls_config_ocsp_require_stapling "struct tls_config *config"
27.Fc
28.Sh DESCRIPTION 27.Sh DESCRIPTION
29.Fn tls_config_ocsp_require_stapling 28.Fn tls_config_ocsp_require_stapling
30requires that a valid stapled OCSP response be provided during the TLS handshake. 29requires that a valid stapled OCSP response be provided
30during the TLS handshake.
31.Sh SEE ALSO 31.Sh SEE ALSO
32.Xr tls_config_set_keypair_file 3 ,
33.Xr tls_config_set_keypair_mem 3 ,
34.Xr tls_config_add_keypair_file 3 , 32.Xr tls_config_add_keypair_file 3 ,
35.Xr tls_config_add_keypair_mem 3 ,
36.Xr tls_handshake 3 , 33.Xr tls_handshake 3 ,
37.Xr tls_init 3 , 34.Xr tls_init 3 ,
38.Xr tls_ocsp_process_response 3 35.Xr tls_ocsp_process_response 3
diff --git a/src/lib/libtls/man/tls_load_file.3 b/src/lib/libtls/man/tls_load_file.3
index 6c0a025955..c67be9159b 100644
--- a/src/lib/libtls/man/tls_load_file.3
+++ b/src/lib/libtls/man/tls_load_file.3
@@ -1,4 +1,4 @@
1.\" $OpenBSD: tls_load_file.3,v 1.4 2017/01/31 16:18:57 beck Exp $ 1.\" $OpenBSD: tls_load_file.3,v 1.5 2017/01/31 20:53:50 jmc Exp $
2.\" 2.\"
3.\" Copyright (c) 2014 Ted Unangst <tedu@openbsd.org> 3.\" Copyright (c) 2014 Ted Unangst <tedu@openbsd.org>
4.\" Copyright (c) 2015 Reyk Floeter <reyk@openbsd.org> 4.\" Copyright (c) 2015 Reyk Floeter <reyk@openbsd.org>
@@ -30,7 +30,7 @@
30.Nm tls_config_set_key_file , 30.Nm tls_config_set_key_file ,
31.Nm tls_config_set_key_mem , 31.Nm tls_config_set_key_mem ,
32.Nm tls_config_set_ocsp_staple_mem , 32.Nm tls_config_set_ocsp_staple_mem ,
33.Nm tls_config_set_ocsp_staple_file 33.Nm tls_config_set_ocsp_staple_file ,
34.Nm tls_config_set_keypair_file , 34.Nm tls_config_set_keypair_file ,
35.Nm tls_config_set_keypair_mem , 35.Nm tls_config_set_keypair_mem ,
36.Nm tls_config_set_keypair_ocsp_file , 36.Nm tls_config_set_keypair_ocsp_file ,
@@ -89,8 +89,8 @@
89.Fa "struct tls_config *config" 89.Fa "struct tls_config *config"
90.Fa "const uint8_t *key" 90.Fa "const uint8_t *key"
91.Fa "size_t len" 91.Fa "size_t len"
92.Ft int
93.Fc 92.Fc
93.Ft int
94.Fo tls_config_set_ocsp_staple_mem 94.Fo tls_config_set_ocsp_staple_mem
95.Fa "struct tls_config *config" 95.Fa "struct tls_config *config"
96.Fa "const uint8_t *staple" 96.Fa "const uint8_t *staple"
@@ -224,7 +224,7 @@ directly sets the public certificate, and private key from memory.
224.Pp 224.Pp
225.Fn tls_config_set_keypair_file 225.Fn tls_config_set_keypair_file
226sets the files from which the public certificate, private key, and DER encoded 226sets the files from which the public certificate, private key, and DER encoded
227ocsp staple will be read. 227OCSP staple will be read.
228.Pp 228.Pp
229.Fn tls_config_set_keypair_ocsp_mem 229.Fn tls_config_set_keypair_ocsp_mem
230directly sets the public certificate, private key, and DER encoded OCSP staple 230directly sets the public certificate, private key, and DER encoded OCSP staple
@@ -238,7 +238,6 @@ used as an alternative certificate for Server Name Indication (server only).
238adds an additional public certificate, and private key from memory, used as an 238adds an additional public certificate, and private key from memory, used as an
239alternative certificate for Server Name Indication (server only). 239alternative certificate for Server Name Indication (server only).
240.Pp 240.Pp
241.Pp
242.Fn tls_config_add_keypair_ocsp_file 241.Fn tls_config_add_keypair_ocsp_file
243adds an additional public certificate, private key, and DER encoded OCSP staple 242adds an additional public certificate, private key, and DER encoded OCSP staple
244from the specified files, used as an alternative certificate for Server Name 243from the specified files, used as an alternative certificate for Server Name