diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2012-11-16 19:12:24 +0000 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2012-11-16 19:12:24 +0000 |
commit | 3db935a9e5e62fcbde719b2a03ce8941bb13514a (patch) | |
tree | 7342527a5baf5f988b42a35b7731dd778bfb7381 /doc/ssl/SSL_CTX_new.pod | |
parent | 63d103ea48ec588700b681ff420cdf9a2907554e (diff) |
add SSL_CONF functions and documentation
Diffstat (limited to 'doc/ssl/SSL_CTX_new.pod')
-rw-r--r-- | doc/ssl/SSL_CTX_new.pod | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/doc/ssl/SSL_CTX_new.pod b/doc/ssl/SSL_CTX_new.pod index 73e8c47f9a..34d8dd7653 100644 --- a/doc/ssl/SSL_CTX_new.pod +++ b/doc/ssl/SSL_CTX_new.pod @@ -28,7 +28,8 @@ client only type. B<method> can be of the following types: A TLS/SSL connection established with these methods will only understand the SSLv2 protocol. A client will send out SSLv2 client hello messages and will also indicate that it only understand SSLv2. A server will only -understand SSLv2 client hello messages. +understand SSLv2 client hello messages. The SSLv2 protocol is deprecated +and very broken: its use is B<strongly> discouraged. =item SSLv3_method(void), SSLv3_server_method(void), SSLv3_client_method(void) @@ -49,6 +50,16 @@ not understand SSLv2 client hello messages which are widely used for compatibility reasons, see SSLv23_*_method(). It will also not understand SSLv3 client hello messages. +=item TLSv1_1_method(void), TLSv1_1_server_method(void), TLSv1_1_client_method(void) + +A TLS/SSL connection established with these methods will only understand the +TLSv1.1 protocol. A client will send out TLSv1.1 client hello messages +and will indicate that it only understands TLSv1.1. A server will only +understand TLSv1.1 client hello messages. This especially means, that it will +not understand SSLv2 client hello messages which are widely used for +compatibility reasons, see SSLv23_*_method(). It will also not understand +SSLv3 client hello messages. + =item SSLv23_method(void), SSLv23_server_method(void), SSLv23_client_method(void) A TLS/SSL connection established with these methods will understand the SSLv2, |