diff options
| author | Matt Caswell <matt@openssl.org> | 2018-02-02 10:17:06 +0000 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2018-02-05 10:56:53 +0000 |
| commit | 1c4b15458670aea5d3849d4b57b8c0ce34a54fbe (patch) | |
| tree | 828d1665530371846bd6d55e23bdba673fbc540e | |
| parent | 1f5878b8e25a785dde330bf485e6ed5a6ae09a1a (diff) | |
Add MiddleboxCompat option to SSL_CONF_cmd man page
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5244)
| -rw-r--r-- | doc/man3/SSL_CONF_cmd.pod | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/doc/man3/SSL_CONF_cmd.pod b/doc/man3/SSL_CONF_cmd.pod index 27317e0652..5179e29bc4 100644 --- a/doc/man3/SSL_CONF_cmd.pod +++ b/doc/man3/SSL_CONF_cmd.pod @@ -420,6 +420,12 @@ B<AllowNoDHEKEX>: In TLSv1.3 allow a non-(ec)dhe based key exchange mode on resumption. This means that there will be no forward secrecy for the resumed session. Equivalent to B<SSL_OP_ALLOW_NO_DHE_KEX>. +B<MiddleboxCompat>: If set then dummy Change Cipher Spec (CCS) messages are sent +in TLSv1.3. This has the effect of making TLSv1.3 look more like TLSv1.2 so that +middleboxes that do not understand TLSv1.3 will not drop the connection. This +option is set by default. A future version of OpenSSL may not set this by +default. Equivalent to B<SSL_OP_ENABLE_MIDDLEBOX_COMPAT>. + =item B<VerifyMode> The B<value> argument is a comma separated list of flags to set. |