summaryrefslogtreecommitdiff
path: root/lib/libtls
diff options
context:
space:
mode:
authorIngo Schwarze <schwarze@cvs.openbsd.org>2021-01-02 19:58:45 +0000
committerIngo Schwarze <schwarze@cvs.openbsd.org>2021-01-02 19:58:45 +0000
commit6ccb944cc4df376c113f0187dfc7057bd1a23288 (patch)
tree0f43ceca9947b39a096d609c52805c65c1e77800 /lib/libtls
parent986102d116ec008c26f40903589b412076c9f9c0 (diff)
Tweak previous:
* Do not abuse .Bl -tag for lists without bodies, use .Bl -item instead. * In tagged lists, put bodies into bodies, not into heads. * Add a few missing macros. * Drop some useless quoting.
Diffstat (limited to 'lib/libtls')
-rw-r--r--lib/libtls/man/tls_config_set_protocols.353
1 files changed, 34 insertions, 19 deletions
diff --git a/lib/libtls/man/tls_config_set_protocols.3 b/lib/libtls/man/tls_config_set_protocols.3
index a636b06f4e0..7c62493e831 100644
--- a/lib/libtls/man/tls_config_set_protocols.3
+++ b/lib/libtls/man/tls_config_set_protocols.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: tls_config_set_protocols.3,v 1.10 2021/01/02 19:15:04 kn Exp $
+.\" $OpenBSD: tls_config_set_protocols.3,v 1.11 2021/01/02 19:58:44 schwarze Exp $
.\"
.\" Copyright (c) 2014 Ted Unangst <tedu@openbsd.org>
.\" Copyright (c) 2015, 2016 Joel Sing <jsing@openbsd.org>
@@ -74,11 +74,15 @@ otherwise.
specifies which versions of the TLS protocol may be used.
Possible values are the bitwise OR of:
.Pp
-.Bl -tag -width "TLS_PROTOCOL_TLSv1_2" -offset indent -compact
-.It Dv TLS_PROTOCOL_TLSv1_0
-.It Dv TLS_PROTOCOL_TLSv1_1
-.It Dv TLS_PROTOCOL_TLSv1_2
-.It Dv TLS_PROTOCOL_TLSv1_3
+.Bl -item -offset indent -compact
+.It
+.Dv TLS_PROTOCOL_TLSv1_0
+.It
+.Dv TLS_PROTOCOL_TLSv1_1
+.It
+.Dv TLS_PROTOCOL_TLSv1_2
+.It
+.Dv TLS_PROTOCOL_TLSv1_3
.El
.Pp
Additionally, the values
@@ -106,10 +110,14 @@ Valid keywords are:
.It Dv tlsv1.1
.It Dv tlsv1.2
.It Dv tlsv1.3
-.It Dv all Pq all supported protocols
-.It Dv default Pq an alias for secure
-.It Dv legacy Pq an alias for all
-.It Dv secure Pq currently TLSv1.2 and TLSv1.3
+.It Dv all
+.Pq all supported protocols
+.It Dv default
+.Pq an alias for Dv secure
+.It Dv legacy
+.Pq an alias for Dv all
+.It Dv secure
+.Pq currently TLSv1.2 and TLSv1.3
.El
.Pp
If a value has a negative prefix (in the form of a leading exclamation mark)
@@ -125,11 +133,15 @@ sets the list of ciphers that may be used.
Lists of ciphers are specified by name, and the
permitted names are:
.Pp
-.Bl -tag -width "insecure" -offset indent -compact
-.It Dv "secure" (or alias "default")
-.It Dv "compat"
-.It Dv "legacy"
-.It Dv "insecure" (or alias "all")
+.Bl -item -offset indent -compact
+.It
+.Dv secure Pq or alias Dv default
+.It
+.Dv compat
+.It
+.Dv legacy
+.It
+.Dv insecure Pq or alias Dv all
.El
.Pp
Alternatively, libssl cipher strings can be specified.
@@ -142,10 +154,13 @@ specifies the parameters that will be used during Diffie-Hellman Ephemeral
(DHE) key exchange.
Possible values are:
.Pp
-.Bl -tag -width "legacy" -offset indent -compact
-.It Dv none
-.It Dv auto
-.It Dv legacy
+.Bl -item -offset indent -compact
+.It
+.Dv none
+.It
+.Dv auto
+.It
+.Dv legacy
.El
.Pp
In