aboutsummaryrefslogtreecommitdiffstats
path: root/doc
Commit message (Collapse)AuthorAgeFilesLines
* Use SHA256 not MD5 as default digest.Rich Salz2015-12-122-3/+22
| | | | | (Documentation update was in the MR but not the commit. Oops.) Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Add extension utility documentation.Dr. Stephen Henson2015-12-121-0/+83
| | | | Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* add X509_up_ref() documentationDr. Stephen Henson2015-12-121-5/+15
| | | | Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* extension documentationDr. Stephen Henson2015-12-121-0/+142
| | | | Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* Support the TLS Feature (aka Must Staple) X.509v3 extension (RFC7633).Rob Stradling2015-12-102-0/+16
| | | | | | | | Signed-off-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Dr. Stephen Henson <steve@openssl.org> GH: #495, MR: #1435
* Document EVP_MD constructors, destructors and manipulatorsRichard Levitte2015-12-071-0/+160
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Document the HMAC changesRichard Levitte2015-12-071-13/+24
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Document the EVP_MD_CTX changesRichard Levitte2015-12-075-43/+43
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Document the changed HMAC API.Richard Levitte2015-12-071-4/+6
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix typo and improve a bit of textViktor Dukhovni2015-12-061-4/+5
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Really disable 56-bit (single-DES) ciphersViktor Dukhovni2015-12-061-14/+3
| | | | Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* Remove support for all 40 and 56 bit ciphers.Kurt Roeckx2015-12-056-223/+0
| | | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #364
* Remove SSL_{CTX_}set_ecdh_auto() and always enable ECDHKurt Roeckx2015-12-041-25/+3
| | | | Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* Remove RSA_FLAG_SIGN_VER flag.Dr. Stephen Henson2015-12-021-7/+0
| | | | | | | | Remove RSA_FLAG_SIGN_VER: this was origininally used to retain binary compatibility after RSA_METHOD was extended to include rsa_sign and rsa_verify fields. It is no longer needed. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove legacy sign/verify from EVP_MD.Dr. Stephen Henson2015-12-021-10/+4
| | | | | | | | | | | | | Remove sign/verify and required_pkey_type fields of EVP_MD: these are a legacy from when digests were linked to public key types. All signing is now handled by the corresponding EVP_PKEY_METHOD. Only allow supported digest types in RSA EVP_PKEY_METHOD: other algorithms already block unsupported types. Remove now obsolete EVP_dss1() and EVP_ecdsa(). Reviewed-by: Richard Levitte <levitte@openssl.org>
* ex_data part 2: doc fixes and CRYPTO_free_ex_index.Rich Salz2015-12-0116-524/+190
| | | | | | | | | | Add CRYPTO_free_ex_index (for shared libraries) Unify and complete the documentation for all "ex_data" API's and objects. Replace xxx_get_ex_new_index functions with a macro. Added an exdata test. Renamed the ex_data internal datatypes. Reviewed-by: Matt Caswell <matt@openssl.org>
* Remove BN_initRich Salz2015-11-301-20/+2
| | | | | | Rename it to be an internal function bn_init. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Correct aes-128-cbc cipher nameViktor Dukhovni2015-11-282-2/+2
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add documentation for BN_with_flagsMatt Caswell2015-11-261-1/+31
| | | | | | | Following on from the previous commit this adds some documentation for the BN_with_flags function which is easy to misuse. Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Turn B<...()> into ...()Rich Salz2015-11-2112-48/+48
| | | | | | For all functions, consistently use asdf() not B<asdf()> Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* Convert __thread to pthreads for Thread Local StorageMatt Caswell2015-11-201-22/+30
| | | | | | | | | | | | In theory the pthreads approach for Thread Local Storage should be more portable. This also changes some APIs in order to accommodate this change. In particular ASYNC_init_pool is renamed ASYNC_init_thread and ASYNC_free_pool is renamed ASYNC_cleanup_thread. Also introduced ASYNC_init and ASYNC_cleanup. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add ASYNC_block_pause and ASYNC_unblock_pauseMatt Caswell2015-11-201-1/+18
| | | | | | | | | There are potential deadlock situations that can occur if code executing within the context of a job aquires a lock, and then pauses the job. This adds an ability to temporarily block pauses from occuring whilst performing work and holding a lock. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add clarification to docs on ASYNC_free_pool()Matt Caswell2015-11-201-10/+14
| | | | | | | Clarify that you must only call this after all async jobs have completed - otherwise you could get memory leaks. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Tweak async documentation based on feedbackMatt Caswell2015-11-203-13/+20
| | | | | | | | | | Add some clarifications to the async documentation. Also changed ASYNC_pause_job() so that it returns success if you are not within the context of a job. This is so that engines can be used either asynchronously or synchronously and can treat an error from ASYNC_pause_job() as a real error. Reviewed-by: Rich Salz <rsalz@openssl.org>
* More async documentationMatt Caswell2015-11-205-1/+88
| | | | | | Document the libssl and command line application aspects of async. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Document async capabilitiesMatt Caswell2015-11-201-0/+242
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* BN_sub: document that r might be the same as a or bKurt Roeckx2015-11-201-0/+1
| | | | | | Reviewed-by: Rich Salz <rsalz@akamai.com> RT #4100, MR #1264
* Use better defaults for TSA.Dr. Stephen Henson2015-11-201-4/+3
| | | | | | | | Use SHA256 for TSA and setted permitted digests to a sensible value. Based on PR#4141 Reviewed-by: Matt Caswell <matt@openssl.org>
* Add support for signer_digest option in TS.Dr. Stephen Henson2015-11-201-0/+12
| | | | | | Based on PR#2145 Reviewed-by: Matt Caswell <matt@openssl.org>
* Document new functionsDr. Stephen Henson2015-11-143-2/+65
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Update and clarify ciphers documentation.Dr. Stephen Henson2015-11-141-5/+26
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* RT2667: Add IRC support to -starttlsNathan Phillip Brink2015-11-131-2/+2
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Fix SSL_use_certificate_chain_fileMatt Caswell2015-11-101-3/+9
| | | | | | | | | The new function SSL_use_certificate_chain_file was always crashing in the internal function use_certificate_chain_file because it would pass a NULL value for SSL_CTX *, but use_certificate_chain_file would unconditionally try to dereference it. Reviewed-by: Stephen Henson <steve@openssl.org>
* Minor EVP_SignInit_ex doc fixMatt Caswell2015-11-041-1/+2
| | | | | | | EVP_SignInit_ex was missing from the NAME section of its man page so typing "man EVP_SignInit_ex" failed to load the page. Reviewed-by: Stephen Henson <steve@openssl.org>
* Remove dummy argument from BIO_get_bind_modeRichard Levitte2015-11-021-1/+1
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* Document how BIO_get_conn_ip and BIO_get_conn_int_port actually workRichard Levitte2015-11-021-2/+2
| | | | | | No dummy arguments. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Fixed typo in rsautl.podSoheil Rashidi2015-11-021-1/+1
| | | | | Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org>
* Replace "SSLeay" in API with OpenSSLRich Salz2015-10-308-88/+16
| | | | | | | All instances of SSLeay (any combination of case) were replaced with the case-equivalent OpenSSL. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove some SSLv2 referencesMatt Caswell2015-10-305-30/+10
| | | | | | | | There were a few remaining references to SSLv2 support which are no longer relevant now that it has been removed. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove SSL_state and SSL_set_stateMatt Caswell2015-10-301-1/+1
| | | | | | | | SSL_state has been replaced by SSL_get_state and SSL_set_state is no longer supported. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Change HANDSHAKE_STATE to OSSL_HANDSHAKE_STATEMatt Caswell2015-10-301-1/+1
| | | | | | | | Rename the enum HANDSHAKE_STATE to OSSL_HANDSHAKE_STATE to ensure there are no namespace clashes, and convert it into a typedef. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Minor documentation tweakMatt Caswell2015-10-301-1/+3
| | | | | | | Update the return type for SSL_state in the documentation. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove SSLeay history, etc., from docsRich Salz2015-10-28156-1110/+68
| | | | | | | | | | | | If something was "present in all versions" of SSLeay, or if it was added to a version of SSLeay (and therefore predates OpenSSL), remove mention of it. Documentation history now starts with OpenSSL. Remove mention of all history before OpenSSL 0.9.8, inclusive. Remove all AUTHOR sections. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Remove HAMC_cleanupRich Salz2015-10-271-6/+1
| | | | | | Old API for use with OpenSSL-0.9.6. Remove it. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Fix typosAlessandro Ghedini2015-10-236-8/+8
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Clarify return values for EVP_DigestVerifyFinal.Adam Eijdenberg2015-10-221-4/+5
| | | | | | | | | Previous language was unclear. New language isn't pretty but I believe it is more accurate. Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Ben Laurie <ben@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Don't use SSLv23_server_method in an exampleMatt Caswell2015-10-211-1/+1
| | | | | | | | The function SSLv23_server_method() is an old name. New code should use TLS_server_method() instead. Therefore don't use SSLv23_server_method() in an example in the docs. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove Obsolete enginesMatt Caswell2015-10-151-6/+0
| | | | | | | | There are a number of engines in the OpenSSL source code which are now obsolete. The following engines have been removed: 4758cca, aep, atalla, cswift, nuron, sureware. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Change the DEFAULT ciphersuites to exclude DES, RC4 and RC2Matt Caswell2015-09-301-5/+6
| | | | | | | | | | | | | This patch updates the "DEFAULT" cipherstring to be "ALL:!COMPLEMENTOFDEFAULT:!eNULL". COMPLEMENTOFDEFAULT is now defined internally by a flag on each ciphersuite indicating whether it should be excluded from DEFAULT or not. This gives us control at an individual ciphersuite level as to exactly what is in DEFAULT and what is not. Finally all DES, RC4 and RC2 ciphersuites are added to COMPLEMENTOFDEFAULT and hence removed from DEFAULT. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Document -no-CApath and -no-CAfileMatt Caswell2015-09-258-0/+80
| | | | | | | Add documentation to all the appropriate apps for the new -no-CApath and -no-CAfile options. Reviewed-by: Andy Polyakov <appro@openssl.org>
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-19 19:07:50 +0000