From 8403e33ccd1fa853a04845229e9d2fca97195761 Mon Sep 17 00:00:00 2001 From: schwarze <> Date: Sat, 2 Jan 2021 19:58:44 +0000 Subject: Tweak previous: * Do not abuse .Bl -tag for lists without bodies, use .Bl -item instead. * In tagged lists, put bodies into bodies, not into heads. * Add a few missing macros. * Drop some useless quoting. --- src/lib/libtls/man/tls_config_set_protocols.3 | 53 +++++++++++++++++---------- 1 file changed, 34 insertions(+), 19 deletions(-) (limited to 'src') diff --git a/src/lib/libtls/man/tls_config_set_protocols.3 b/src/lib/libtls/man/tls_config_set_protocols.3 index a636b06f4e..7c62493e83 100644 --- a/src/lib/libtls/man/tls_config_set_protocols.3 +++ b/src/lib/libtls/man/tls_config_set_protocols.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: tls_config_set_protocols.3,v 1.10 2021/01/02 19:15:04 kn Exp $ +.\" $OpenBSD: tls_config_set_protocols.3,v 1.11 2021/01/02 19:58:44 schwarze Exp $ .\" .\" Copyright (c) 2014 Ted Unangst .\" Copyright (c) 2015, 2016 Joel Sing @@ -74,11 +74,15 @@ otherwise. specifies which versions of the TLS protocol may be used. Possible values are the bitwise OR of: .Pp -.Bl -tag -width "TLS_PROTOCOL_TLSv1_2" -offset indent -compact -.It Dv TLS_PROTOCOL_TLSv1_0 -.It Dv TLS_PROTOCOL_TLSv1_1 -.It Dv TLS_PROTOCOL_TLSv1_2 -.It Dv TLS_PROTOCOL_TLSv1_3 +.Bl -item -offset indent -compact +.It +.Dv TLS_PROTOCOL_TLSv1_0 +.It +.Dv TLS_PROTOCOL_TLSv1_1 +.It +.Dv TLS_PROTOCOL_TLSv1_2 +.It +.Dv TLS_PROTOCOL_TLSv1_3 .El .Pp Additionally, the values @@ -106,10 +110,14 @@ Valid keywords are: .It Dv tlsv1.1 .It Dv tlsv1.2 .It Dv tlsv1.3 -.It Dv all Pq all supported protocols -.It Dv default Pq an alias for secure -.It Dv legacy Pq an alias for all -.It Dv secure Pq currently TLSv1.2 and TLSv1.3 +.It Dv all +.Pq all supported protocols +.It Dv default +.Pq an alias for Dv secure +.It Dv legacy +.Pq an alias for Dv all +.It Dv secure +.Pq currently TLSv1.2 and TLSv1.3 .El .Pp If a value has a negative prefix (in the form of a leading exclamation mark) @@ -125,11 +133,15 @@ sets the list of ciphers that may be used. Lists of ciphers are specified by name, and the permitted names are: .Pp -.Bl -tag -width "insecure" -offset indent -compact -.It Dv "secure" (or alias "default") -.It Dv "compat" -.It Dv "legacy" -.It Dv "insecure" (or alias "all") +.Bl -item -offset indent -compact +.It +.Dv secure Pq or alias Dv default +.It +.Dv compat +.It +.Dv legacy +.It +.Dv insecure Pq or alias Dv all .El .Pp Alternatively, libssl cipher strings can be specified. @@ -142,10 +154,13 @@ specifies the parameters that will be used during Diffie-Hellman Ephemeral (DHE) key exchange. Possible values are: .Pp -.Bl -tag -width "legacy" -offset indent -compact -.It Dv none -.It Dv auto -.It Dv legacy +.Bl -item -offset indent -compact +.It +.Dv none +.It +.Dv auto +.It +.Dv legacy .El .Pp In -- cgit v1.2.3-55-g6feb