summaryrefslogtreecommitdiffstats
path: root/doc/man7/fips_module.pod
diff options
context:
space:
mode:
authorBeat Bolli <dev@drbeat.li>2021-07-30 18:39:51 +0200
committerPauli <pauli@openssl.org>2021-08-04 15:02:27 +1000
commit2fc02378ffcd9a266077eeea224890c534b7aaef (patch)
tree257bb9c5ffd11e27ffcf6f7e0126b833c66aef03 /doc/man7/fips_module.pod
parent92c03668c0cd77434006b613e3429888a0a8ecfe (diff)
doc: use the documented =item markers
The generated lists[1] look weird when using a dash as the list item character. Perlpod documents[2] '*' for unordered lists and '1.' (note the period) for ordered lists. Use these characters instead. [1] e.g. https://www.openssl.org/docs/manmaster/man7/migration_guide.html#New-Algorithms [2] https://perldoc.perl.org/perlpod Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/16190)
Diffstat (limited to 'doc/man7/fips_module.pod')
-rw-r--r--doc/man7/fips_module.pod14
1 files changed, 7 insertions, 7 deletions
diff --git a/doc/man7/fips_module.pod b/doc/man7/fips_module.pod
index b47ed279f6..e374651fa5 100644
--- a/doc/man7/fips_module.pod
+++ b/doc/man7/fips_module.pod
@@ -22,15 +22,15 @@ legacy APIs or features that avoid the FIPS module. Specifically this includes:
=over 4
-=item -
+=item *
Low level cryptographic APIs (use the high level APIs, such as EVP, instead)
-=item -
+=item *
Engines
-=item -
+=item *
Any functions that create or modify custom "METHODS" (for example
EVP_MD_meth_new(), EVP_CIPHER_meth_new(), EVP_PKEY_meth_new(), RSA_meth_new(),
@@ -110,21 +110,21 @@ some disadvantages to this approach:
=over 4
-=item -
+=item *
You may not want all applications to use the FIPS module.
It may be the case that some applications should and some should not use the
FIPS module.
-=item -
+=item *
If applications take explicit steps to not load the default config file or
set different settings.
This method will not work for these cases.
-=item -
+=item *
The algorithms available in the FIPS module are a subset of the algorithms
that are available in the default OpenSSL Provider.
@@ -132,7 +132,7 @@ that are available in the default OpenSSL Provider.
If any applications attempt to use any algorithms that are not present,
then they will fail.
-=item -
+=item *
Usage of certain deprecated APIs avoids the use of the FIPS module.