diff options
Diffstat (limited to 'usr.bin/openssl/openssl.1')
| -rw-r--r-- | usr.bin/openssl/openssl.1 | 37 |
1 files changed, 11 insertions, 26 deletions
diff --git a/usr.bin/openssl/openssl.1 b/usr.bin/openssl/openssl.1 index 45ae95fa5b4..9868955691b 100644 --- a/usr.bin/openssl/openssl.1 +++ b/usr.bin/openssl/openssl.1 @@ -1,4 +1,4 @@ -.\" $OpenBSD: openssl.1,v 1.148 2023/06/08 09:40:17 schwarze Exp $ +.\" $OpenBSD: openssl.1,v 1.149 2023/07/03 06:22:07 beck Exp $ .\" ==================================================================== .\" Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved. .\" @@ -110,7 +110,7 @@ .\" copied and put under another distribution licence .\" [including the GNU Public Licence.] .\" -.Dd $Mdocdate: June 8 2023 $ +.Dd $Mdocdate: July 3 2023 $ .Dt OPENSSL 1 .Os .Sh NAME @@ -911,8 +911,6 @@ Specify the directories to process. .Sh CIPHERS .Nm openssl ciphers .Op Fl hsVv -.Op Fl tls1 -.Op Fl tls1_1 .Op Fl tls1_2 .Op Fl tls1_3 .Op Ar control @@ -936,7 +934,7 @@ The options are as follows: Print a brief usage message. .It Fl s Only list ciphers that are supported by the TLS method. -.It Fl tls1 | tls1_1 | tls1_2 | tls1_3 +.It Fl tls1_2 | tls1_3 In combination with the .Fl s option, list the ciphers which could be used @@ -4265,7 +4263,6 @@ Verify the input data and output the recovered data. .Op Fl crlf .Op Fl debug .Op Fl dtls -.Op Fl dtls1 .Op Fl dtls1_2 .Op Fl extended_crl .Op Fl groups Ar list @@ -4286,8 +4283,6 @@ Verify the input data and output the recovered data. .Op Fl no_ign_eof .Op Fl no_legacy_server_connect .Op Fl no_ticket -.Op Fl no_tls1 -.Op Fl no_tls1_1 .Op Fl no_tls1_2 .Op Fl no_tls1_3 .Op Fl pass Ar arg @@ -4307,8 +4302,6 @@ Verify the input data and output the recovered data. .Op Fl state .Op Fl status .Op Fl timeout -.Op Fl tls1 -.Op Fl tls1_1 .Op Fl tls1_2 .Op Fl tls1_3 .Op Fl tlsextdebug @@ -4412,8 +4405,6 @@ as required by some servers. Print extensive debugging information, including a hex dump of all traffic. .It Fl dtls Permit any version of DTLS. -.It Fl dtls1 -Permit only DTLS1.0. .It Fl dtls1_2 Permit only DTLS1.2. .It Fl groups Ar list @@ -4455,8 +4446,8 @@ Can be used to override the implicit .Fl ign_eof after .Fl quiet . -.It Fl no_tls1 | no_tls1_1 | no_tls1_2 | no_tls1_3 -Disable the use of TLS1.0, 1.1, 1.2 and 1.3 respectively. +.It Fl no_tls1_2 | no_tls1_3 +Disable the use of TLS1.2 and 1.3 respectively. .It Fl no_ticket Disable RFC 4507 session ticket support. .It Fl pass Ar arg @@ -4529,8 +4520,8 @@ Send a certificate status request to the server (OCSP stapling). The server response (if any) is printed out. .It Fl timeout Enable send/receive timeout on DTLS connections. -.It Fl tls1 | tls1_1 | tls1_2 | tls1_3 -Permit only TLS1.0, 1.1, 1.2 or 1.3 respectively. +.It Fl tls1_2 | tls1_3 +Permit only TLS1.2 or 1.3 respectively. .It Fl tlsextdebug Print a hex dump of any TLS extensions received from the server. .It Fl use_srtp Ar profiles @@ -4599,8 +4590,6 @@ will be used. .Op Fl no_dhe .Op Fl no_ecdhe .Op Fl no_ticket -.Op Fl no_tls1 -.Op Fl no_tls1_1 .Op Fl no_tls1_2 .Op Fl no_tls1_3 .Op Fl no_tmp_rsa @@ -4616,8 +4605,6 @@ will be used. .Op Fl status_url Ar url .Op Fl status_verbose .Op Fl timeout -.Op Fl tls1 -.Op Fl tls1_1 .Op Fl tls1_2 .Op Fl tls1_3 .Op Fl tlsextdebug @@ -4749,8 +4736,6 @@ If this fails, a static set of parameters hard coded into the program will be used. .It Fl dtls Permit any version of DTLS. -.It Fl dtls1 -Permit only DTLS1.0. .It Fl dtls1_2 Permit only DTLS1.2. .It Fl groups Ar list @@ -4813,8 +4798,8 @@ Disable ephemeral DH cipher suites. Disable ephemeral ECDH cipher suites. .It Fl no_ticket Disable RFC 4507 session ticket support. -.It Fl no_tls1 | no_tls1_1 | no_tls1_2 | no_tls1_3 -Disable the use of TLS1.0, 1.1, 1.2, and 1.3, respectively. +.It Fl no_tls1_2 | no_tls1_3 +Disable the use of TLS1.2, and 1.3, respectively. .It Fl no_tmp_rsa Disable temporary RSA key generation. .It Fl nocert @@ -4849,8 +4834,8 @@ Enables certificate status request support (OCSP stapling) and gives a verbose printout of the OCSP response. .It Fl timeout Enable send/receive timeout on DTLS connections. -.It Fl tls1 | tls1_1 | tls1_2 | tls1_3 -Permit only TLS1.0, 1.1, 1.2, or 1.3, respectively. +.It Fl tls1_2 | tls1_3 +Permit only TLS1.2, or 1.3, respectively. .It Fl tlsextdebug Print a hex dump of any TLS extensions received from the server. .It Fl use_srtp Ar profiles |