diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2023-06-11 17:41:03 +0200 |
|---|---|---|
| committer | Tomas Mraz <tomas@openssl.org> | 2023-10-10 20:36:06 +0200 |
| commit | ac0677bd2394c04632f7ad526879a866b6ed149f (patch) | |
| tree | f39848852a495281b10e6ac0f4e2932e23aa9390 /doc | |
| parent | 2f768882e06eb460895ec4836e405e203ed90663 (diff) | |
CMP: fix OSSL_CMP_MSG_http_perform() by adding option OSSL_CMP_OPT_USE_TLS
Fixes #21120
Reviewed-by: Todd Short <todd.short@me.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21176)
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/man3/OSSL_CMP_CTX_new.pod | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/doc/man3/OSSL_CMP_CTX_new.pod b/doc/man3/OSSL_CMP_CTX_new.pod index 488b22de9b..8109970171 100644 --- a/doc/man3/OSSL_CMP_CTX_new.pod +++ b/doc/man3/OSSL_CMP_CTX_new.pod @@ -237,6 +237,17 @@ The following options can be set: A value <= 0 means no limitation (waiting indefinitely). Default is 0. +=item B<OSSL_CMP_OPT_USE_TLS> + + Use this option to indicate to the HTTP implementation + whether TLS is going to be used for the connection (resulting in HTTPS). + The value 1 indicates that TLS is used for client-side HTTP connections, + which needs to be implemented via a callback function set by + OSSL_CMP_CTX_set_http_cb(). + The value 0 indicates that TLS is not used. + Default is -1 for backward compatibility: TLS is used by the client side + if and only if OSSL_CMP_CTX_set_http_cb_arg() sets a non-NULL I<arg>. + =item B<OSSL_CMP_OPT_VALIDITY_DAYS> Number of days new certificates are asked to be valid for. @@ -384,6 +395,7 @@ as described for the I<bio_update_fn> parameter of L<OSSL_HTTP_open(3)>. The callback may make use of a custom defined argument I<arg>, as described for the I<arg> parameter of L<OSSL_HTTP_open(3)>. The argument is stored in the OSSL_CMP_CTX using OSSL_CMP_CTX_set_http_cb_arg(). +See also the B<OSSL_CMP_OPT_USE_TLS> option described above. OSSL_CMP_CTX_set_http_cb_arg() sets the argument, respectively a pointer to a structure containing arguments such as an B<SSL_CTX> structure, |