summaryrefslogtreecommitdiffstats
path: root/doc/ssl
AgeCommit message (Collapse)Author
2014-01-03Add ServerInfoFile to SSL_CONF, update docs.Dr. Stephen Henson
2014-01-03Use algorithm specific chains for certificates.Dr. Stephen Henson
Fix a limitation in SSL_CTX_use_certificate_chain_file(): use algorithm specific chains instead of the shared chain. Update docs.
2013-11-18New functions to retrieve certificate from SSL_CTXDr. Stephen Henson
New functions to retrieve current certificate or private key from an SSL_CTX. Constify SSL_get_private_key().
2013-11-13Additional "chain_cert" functions.Rob Stradling
PR#3169 This patch, which currently applies successfully against master and 1_0_2, adds the following functions: SSL_[CTX_]select_current_cert() - set the current certificate without disturbing the existing structure. SSL_[CTX_]get0_chain_certs() - get the current certificate's chain. SSL_[CTX_]clear_chain_certs() - clear the current certificate's chain. The patch also adds these functions to, and fixes some existing errors in, SSL_CTX_add1_chain_cert.pod.
2013-10-22POD: Fix list terminationLubomir Rintel
This fixes problems in POD list formatting: extra or missing =back sequences. doc/ssl/SSL_CTX_set1_curves.pod around line 90: =back without =over doc/ssl/SSL_CTX_set1_verify_cert_store.pod around line 73: =back without =over doc/ssl/SSL_CTX_add1_chain_cert.pod around line 82: =back without =over doc/crypto/evp.pod around line 40: '=item' outside of any '=over' crypto/des/des.pod around line 184: You forgot a '=back' before '=head1' PR#3147
2013-10-22POD: Fix item numberingLubomir Rintel
Newer pod2man considers =item [1-9] part of a numbered list, while =item 0 starts an unnumbered list. Add a zero effect formatting mark to override this. doc/apps/smime.pod around line 315: Expected text after =item, not a number ... PR#3146
2013-10-22Add SSL_CONF command to set DH Parameters.Dr. Stephen Henson
2013-10-20Extend SSL_CONFDr. Stephen Henson
Extend SSL_CONF to return command value types. Add certificate and key options. Update documentation.
2013-09-13Update docs to mention "BEGIN SERVERINFO FOR ".Trevor Perrin
2013-09-05Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.Rob Stradling
OS X 10.8..10.8.3 has broken support for ECDHE-ECDSA ciphers.
2013-09-03Document supported curve functions.Dr. Stephen Henson
2013-08-17Add documentation.Dr. Stephen Henson
Preliminary documentation for chain and verify stores and certificate chain setting functions.
2013-06-18Cleanup of custom extension stuff.Trevor
serverinfo rejects non-empty extensions. Omit extension if no relevant serverinfo data. Improve error-handling in serverinfo callback. Cosmetic cleanups. s_client documentation. s_server documentation. SSL_CTX_serverinfo documentation. Cleaup -1 and NULL callback handling for custom extensions, add tests. Cleanup ssl_rsa.c serverinfo code. Whitespace cleanup. Improve comments in ssl.h for serverinfo. Whitespace. Cosmetic cleanup. Reject non-zero-len serverinfo extensions. Whitespace. Make it build.
2013-06-12Document updates from wiki.Matt Caswell
PR#3071 The primary changes made are: - Updates to the "NAME" section of many pages to correctly reflect the functions defined on those pages. This section is automatically parsed by the util/extract-names.pl script, so if it is not correct then running "man" will not correctly locate the right manual pages. - Updates to take account of where functions are now deprecated - Full documentation of the ec sub-library - A number of other typo corrections and other minor tweaks
2013-02-26Update SSL_CONF docs.Dr. Stephen Henson
Fix some typos and update version number first added: it has now been backported to OpenSSL 1.0.2.
2013-02-15Fix POD errors to stop make install_docs dying with pod2man 2.5.0+Nick Alcock
podlators 2.5.0 has switched to dying on POD syntax errors. This means that a bunch of long-standing erroneous POD in the openssl documentation now leads to fatal errors from pod2man, halting installation. Unfortunately POD constraints mean that you have to sort numeric lists in ascending order if they start with 1: you cannot do 1, 0, 2 even if you want 1 to appear first. I've reshuffled such (alas, I wish there were a better way but I don't know of one).
2012-12-06documentation fixesDr. Stephen Henson
2012-11-20reorganise SSL_CONF_cmd manual page and update some linksDr. Stephen Henson
2012-11-18clarify docsDr. Stephen Henson
2012-11-18fix manual page file nameDr. Stephen Henson
2012-11-17fix typos in SSL_CONF documentationDr. Stephen Henson
2012-11-16add SSL_CONF functions and documentationDr. Stephen Henson
2011-11-13PR: 1794Dr. Stephen Henson
Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr> Reviewed by: steve Document unknown_psk_identify alert, remove pre-RFC 5054 string from ssl_stat.c
2011-10-13Clarify warningBodo Möller
2011-07-11Fix typo.Bodo Möller
Submitted by: Jim Morrison
2011-02-03CVE-2010-4180 fix (from OpenSSL_1_0_0-stable)Bodo Möller
2010-04-07Add SHA2 algorithms to SSL_library_init(). Although these aren't usedDr. Stephen Henson
directly by SSL/TLS SHA2 certificates are becoming more common and applications that only call SSL_library_init() and not OpenSSL_add_all_alrgorithms() will fail when verifying certificates. Update docs.
2010-04-06Remove obsolete PRNG note. Add comment about use of SHA256 et al.Dr. Stephen Henson
2010-02-18clarify documentationDr. Stephen Henson
2010-02-17Allow renegotiation if SSL_OP_LEGACY_SERVER_CONNECT is set as well asDr. Stephen Henson
initial connection to unpatched servers. There are no additional security concerns in doing this as clients don't see renegotiation during an attack anyway.
2010-02-12update references to new RI RFCDr. Stephen Henson
2010-01-27reword RI descriptionDr. Stephen Henson
2010-01-27update documentation to reflect new renegotiation optionsDr. Stephen Henson
2010-01-05TypoDr. Stephen Henson
2009-12-09clarify docsDr. Stephen Henson
2009-12-09Document option clearning functions.Dr. Stephen Henson
Initial secure renegotiation documentation.
2009-09-12PR: 2025Dr. Stephen Henson
Submitted by: Tomas Mraz <tmraz@redhat.com> Approved by: steve@openssl.org Constify SSL_CIPHER_description
2009-02-14PR: 1835Dr. Stephen Henson
Submitted by: Damien Miller <djm@mindrot.org> Approved by: steve@openssl.org Fix various typos.
2008-08-01Refer to SSL_pending from the man page for SSL_readLutz Jänicke
2008-06-03Memory saving patch.Ben Laurie
2007-08-23Document ticket disabling option.Dr. Stephen Henson
2006-12-21fix typosNils Larsch
PR: 1354, 1355, 1398, 1408
2006-12-06fix documentationNils Larsch
PR: 1343
2006-03-12note that SSL_library_init() is not reentrantNils Larsch
2006-03-10add initial support for RFC 4279 PSK SSL ciphersuitesNils Larsch
PR: 1191 Submitted by: Mika Kousa and Pasi Eronen of Nokia Corporation Reviewed by: Nils Larsch
2005-10-26Add fixes for CAN-2005-2969.Bodo Möller
(This were in 0.9.7-stable and 0.9.8-stable, but not in HEAD so far.)
2005-08-14Let the TLSv1_method() etc. functions return a const SSL_METHODNils Larsch
pointer and make the SSL_METHOD parameter in SSL_CTX_new, SSL_CTX_set_ssl_version and SSL_set_ssl_method const.
2005-04-08improve docu of SSL_CTX_use_PrivateKey()Nils Larsch
2005-03-30update docs (recent constification)Nils Larsch
2005-03-22Doc fixes.Dr. Stephen Henson
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-06 12:41:04 +0000