diff options
author | Lutz Jänicke <jaenicke@openssl.org> | 2001-07-21 11:02:17 +0000 |
---|---|---|
committer | Lutz Jänicke <jaenicke@openssl.org> | 2001-07-21 11:02:17 +0000 |
commit | 4db48ec0bdbad08c6852bea37e0aea5a04329b99 (patch) | |
tree | 7bf3116200ad75a5d715293708d9d5d0e5518f70 /doc/ssl/SSL_CTX_set_cipher_list.pod | |
parent | c518ade1fd9a791625646bc9e77f5b9b2d378b78 (diff) |
Documentation about ephemeral key exchange
Diffstat (limited to 'doc/ssl/SSL_CTX_set_cipher_list.pod')
-rw-r--r-- | doc/ssl/SSL_CTX_set_cipher_list.pod | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/doc/ssl/SSL_CTX_set_cipher_list.pod b/doc/ssl/SSL_CTX_set_cipher_list.pod index 84825fb6f5..0fec568296 100644 --- a/doc/ssl/SSL_CTX_set_cipher_list.pod +++ b/doc/ssl/SSL_CTX_set_cipher_list.pod @@ -39,8 +39,9 @@ certificate and key. A RSA cipher can only be chosen, when a RSA certificate is available. RSA export ciphers with a keylength of 512 bits for the RSA key require a temporary 512 bit RSA key, as typically the supplied key has a length -of 1024 bit. RSA ciphers using EDH need a certificate and key and -additional DH-parameters. +of 1024 bit (see +L<SSL_CTX_set_tmp_rsa_callback(3)|SSL_CTX_set_tmp_rsa_callback(3)>). +RSA ciphers using EDH need a certificate and key and additional DH-parameters. A DSA cipher can only be chosen, when a DSA certificate is available. DSA ciphers always use DH key exchange and therefore need DH-parameters. @@ -60,6 +61,8 @@ could be selected and 0 on complete failure. L<ssl(3)|ssl(3)>, L<SSL_get_ciphers(3)|SSL_get_ciphers(3)>, L<SSL_CTX_use_certificate(3)|SSL_CTX_use_certificate(3)>, +L<SSL_CTX_set_tmp_rsa_callback(3)|SSL_CTX_set_tmp_rsa_callback(3)>, +L<SSL_CTX_set_tmp_dh_callback(3)|SSL_CTX_set_tmp_dh_callback(3)>, L<ciphers(1)|ciphers(1)> =cut |