| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
SSL_SESSION_set1_id(3). Merge the documentation from OpenSSL,
slightly tweaked by me.
|
|
|
|
|
|
| |
SSL_CIPHER_get_cipher_nid(3), SSL_CIPHER_get_digest_nid(3),
SSL_CIPHER_get_kx_nid(3), SSL_CIPHER_get_auth_nid(3), and
SSL_CIPHER_is_aead(3). Merge the documentation from OpenSSL.
|
|
|
|
|
| |
SSL_SESSION_get0_id_context(3).
Merge the documentation from OpenSSL, tweaked by me.
|
|
|
|
|
|
| |
provided OPENSSL_init_crypto(3) and OPENSSL_init_ssl(3).
Write the documentation from scratch
because the text OpenSSL provides is full of bloat.
|
|
|
|
|
| |
SSL_SESSION_has_ticket(3) and SSL_SESSION_get_ticket_lifetime_hint(3).
Merge the documentation from OpenSSL, tweaked by me.
|
|
|
|
|
|
|
|
|
| |
We already provided the setters, so also provide the getters like
OpenSSL does. Addition prompted by the use of those functions in recent
openvpn releases.
manpage diff from schwarze@ (thanks!) with input from jsing@, ok tb@
jsing@
|
|
|
|
| |
via OpenSSL commit cbade361 Dec 12 13:14:45 2017 +0100
|
|
|
|
|
| |
from Rich Salz <rsalz@openssl.org>
via OpenSSL commit 9e183d22 Mar 11 08:56:44 2017 -0500.
|
| |
|
| |
|
|
|
|
| |
no text change
|
|
|
|
|
| |
and correct the description of SSL_OP_ALL.
Found by inspecting <openssl/ssl.h>.
|
|
|
|
|
| |
the new RETURN VALUES section from OpenSSL, tweaked by me.
While here, correct the description of SSL_CIPHER_description(3).
|
|
|
|
|
| |
Merge the documentation from OpenSSL, slightliy tweaking the wording
for precision. The connection is not necessarily "working" yet.
|
|
|
|
| |
Merge the documentation from OpenSSL.
|
|
|
|
| |
SSL_CTX_get_ciphers(3). Merge the documentation from OpenSSL.
|
|
|
|
|
| |
SSL_SESSION_up_ref(3).
Merge the documentation from OpenSSL, tweaked by me.
|
|
|
|
|
|
| |
X509_STORE_up_ref(3). X509_STORE_new(3) and X509_STORE_free(3)
have already been available earlier. Import the documentation from
OpenSSL, adding some precision.
|
|
|
|
|
| |
SSL_SESSION_get_protocol_version(3).
Import the documentation form OpenSSL, tweaked by me, OK tb@.
|
|
|
|
| |
OpenSSL commit 1f13ad31 Dec 25 17:50:39 2017 +0800 tweaked by me.
|
|
|
|
|
|
| |
jsing@ provided SSL_get_client_random(3), SSL_get_server_random(3), and
SSL_SESSION_get_master_key(3). Import the documentation from OpenSSL,
with some tweaks.
|
|
|
|
|
| |
SSL_CTX_get0_certificate(3). It is public in OpenSSL, too,
but OpenSSL has no documentation, so write some from scratch.
|
|
|
|
|
|
|
|
| |
SSL_CTX_get_tlsext_status_cb(3) and SSL_CTX_get_tlsext_status_arg(3).
Merge the documentation,
mostly from Remi Gacogne <rgacogne-github at coredump dot fr>
via OpenSSL commit fddfc0af Aug 6 12:54:29 2016 +0200
plus the RETURN VALUES part by me.
|
|
|
|
|
|
| |
SSL_CTX_up_ref(3). Merge the related documentation from OpenSSL,
but tweak the wording to be less confusing and simplify the RETURN
VALUES section.
|
|
|
|
|
| |
SSL_CTX_get0_param(3) and SSL_get0_param(3).
Merge the related documentation from OpenSSL, with small tweaks.
|
|
|
|
| |
Based on a diff from doug@, similar diff from inoguchi@
|
| |
|
|
|
|
|
| |
from Paul Yang <yang dot yang at baishancloud dot com>
via OpenSSL commit 190b9a03 Jun 28 15:46:13 2017 +0800
|
|
|
|
|
|
|
| |
from Matt Caswell <matt at openssl dot org>.
In particular, stop talking about SSL 2.0 and SSL 3.0,
but do not start talking about TLS 1.3 just yet.
|
|
|
|
|
| |
that are deprecated no-ops in LibreSSL, but that OpenSSL explicitly
documented on April 19, 2017, without deprecating them.
|
|
|
|
|
| |
from Rich Salz <rsalz at openssl dot org>
via OpenSSL commit 1722496f Jun 8 15:18:38 2017 -0400.
|
|
|
|
|
|
|
|
|
| |
clarify that SSL_CTX_remove_session(3) marks the session as non-resumable.
From Rich Salz <rsalz at openssl dot org>
via OpenSSL commit 1722496f Jun 8 15:18:38 2017 -0400
and from Matt Caswell <matt at openssl dot org>
via OpenSSL commit b8964668 Apr 26 15:16:18 2017 +0100.
|
|
|
|
|
|
|
|
| |
from the OpenSSL manual and from code inspection.
Use my own Copyright and license because no Copyright-worthy amount
of text from OpenSSL remains.
And, no, these functions do *NOT* check private keys, not at all.
|
|
|
|
|
| |
from Beat Bolli <dev at drbeat dot li>
via OpenSSL commit 7a67a3ba Jan 18 23:49:43 2017 +0100
|
| |
|
|
|
|
|
|
|
|
|
| |
While importing:
* Fix the prototypes, they all contained wrong datatypes.
* Delete SSL3_VERSION which is no longer supported.
* Delete TLS1_3_VERSION and DTLS1_2_VERSION, not yet supported.
* Delete the lie that these would be macros.
* Improve SEE ALSO and HISTORY sections.
|
|
|
|
| |
both pointed out by jsing@
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
NPN was never standardised and the last draft expired in October 2012.
ALPN was standardised in July 2014 and has been supported in LibreSSL
since December 2014. NPN has also been removed from Chromium in May 2016.
TLS clients and servers that try to use/enable NPN will fail gracefully and
fallback to the default protocol, since it will essentially appear that the
otherside does not support NPN. At some point in the future we will
actually remove the NPN related symbols entirely.
ok bcook@ beck@ doug@
|
|
|
|
|
|
| |
the read accessors we don't have and fixing the prototypes - the
data type of each and every argument differs in the OpenSSL manuals.
Reference the new page from SSL_set_tmp_ecdh(3) as suggested by jsing@.
|
|
|
|
| |
Feedback and OK jsing@.
|
|
|
|
| |
OK jsing.
|
| |
|
|
|
|
|
| |
found with regress/usr.bin/mandoc/db/dbm_dump;
OK jmc@
|
|
|
|
|
|
| |
tricky, especially since the manpage is full of lies.
Try to make readers think twice before using them.
With oks and help from schwarze@, tedu@, sthen@, jmc@
|