summaryrefslogtreecommitdiff
path: root/lib/libtls/man
AgeCommit message (Collapse)Author
2023-09-18remove tls_reset(3) from the NAME, SYNOPSIS, and HISTORY sectionsIngo Schwarze
because it is documented in the separate tls_client(3) manual page
2023-07-02Remove the ability to do tls 1.0 and 1.1 from libtls.Bob Beck
With this change any requests from configurations to request versions of tls before tls 1.2 will use tls 1.2. This prepares us to deprecate tls 1.0 and tls 1.1 support from libssl. ok tb@
2022-01-01contibutions -> contributionsJonathan Gray
2021-06-22zap wonky commas;Jason McIntyre
2021-06-22Clarify tls_config_set_*_file() file I/O semanticskn
tls_config_set_*_file(3) do not just set the file paths like tls_config_set_*_path(3) do, they do load the given file(s) into memory directly using tls_config_load_file(). This distinction is important because it means a later tls_connect(3) will not do any file I/O (at least wrt. those files), which is relevant when for example pleding without "[rwc]path" after loading files into memory and before doing tls_connect(3). The manual's current wording made me use the following due to above way of pledging a program: tls_load_file() tls_config_set_ca_mem() tls_unload_file() While in fact a single tls_config_set_ca_file() call does the same. tls_config.c r1.26 (Aug 2016) change the code but forgot to amend the manual as noted by tb, thanks. Feedback OK tb
2021-01-02Tweak previous:Ingo Schwarze
* Do not abuse .Bl -tag for lists without bodies, use .Bl -item instead. * In tagged lists, put bodies into bodies, not into heads. * Add a few missing macros. * Drop some useless quoting.
2021-01-02Make list of DHE parameters more prominentkn
Follow the previous commit and complete the manual page for consistency; better readable and tags for free. OK tb
2020-12-30Make the list of supported protocols more prominentkn
Manuals like httpd.conf(5) refer to this for valid protocol strings, but elements inlined into sentences are hard find to spot. Use a list as already done elsewhere in this manual. OK jmc on earlier version Feeback OK tb
2020-01-22Note in the man page that the default protocols list includes 1.3Bob Beck
ok jsing@
2020-01-20Add support for TLSv1.3 as a protocol to libtls.Joel Sing
This makes tls_config_parse_protocols() recognise and handle "tlsv1.3". If TLSv1.3 is enabled libtls will also request libssl to enable it. ok beck@ tb@
2019-11-02Document tls_conn_cipher_strength().Joel Sing
ok schwarze@
2019-07-09Group tls_{handshake,read,write,close}() return values documentation.Joel Sing
Move the documentation for tls_error() down so that both the special return values for tls_{handshake,read,write,close}() directly follow the standard return values for the same functions. Prompted by deraadt@. ok deraadt@ schwarze@
2019-06-20tls_read() & tls_write() return 4 possible values: TLS_WANT_POLLOUT,Theo de Raadt
TLS_WANT_POLLIN, -1, or 0. After handling the first two, check for -1 rather than vaguely "< 0". ok jsing
2019-03-20fix examples (libtls uses its own error reporting mechanism)Marc Espie
okay tb@
2018-12-14Delete a note taken during the rev. 1.1 man page spliteIngo Schwarze
that should have been deleted before commit. The cross reference is already present below SEE ALSO. Glitch noticed by jsing@.
2018-11-29expose the default cert file as a function, not a define. it's reallyTed Unangst
an internal detail of the library, so the string should live inside it, not in the application code. ok jsing
2018-08-21typo in argument type, from Mario dot Andres dot Campos at gmail dot comIngo Schwarze
2018-07-24Use the same order in NAME, SYNOPSIS, DESCRIPTION, and RETURN VALUES toTheo Buehler
improve readability and ease of maintenance. Positive feedback jmc Detailed suggestion & ok schwarze
2018-07-23Document tls_peer_ocsp_result() and use it in place of the non-existentTheo Buehler
tls_peer_ocsp_result_msg() in the documentation. input & ok jsing Reads fine to jmc and makes sense to schwarze
2018-07-09Move a detail on tls_connect(3) to its documentation and be a bit moreTheo Buehler
explicit about the servername argument of tls_connect_servername(3). input & ok jsing, input & ok schwarze on earlier version
2018-07-09wording tweak for tls_init() from jsingTheo Buehler
ok jsing, schwarze
2018-07-08Simplify and shorten the description of tls_init(3),Ingo Schwarze
fixing an awkward wording noticed by tb@. OK tb@
2018-05-26minor markup improvement: .Fa *cctx -> .Pf * Fa cctxIngo Schwarze
2018-05-26Quote .Fa arguments containing blanks.Ingo Schwarze
Diff from Jack Burton <jack at saosce dot com dot au>.
2018-03-19Automatically handle library initialisation for libtls.Joel Sing
Now that we have tls_init() under pthread_once(), automatically initialise libtls from the entry point functions (tls_config(), tls_client() and tls_server()) - this makes an explicit tls_init() call no longer a requirement. ok bcook@ beck@ inoguchi@
2018-03-08un-revert tls_init pthread_once change, now that stub is added so that ↵Bob Beck
builds work
2018-03-07backout. diff was not tested comprehensively, resulting in a broken tree.Theo de Raadt
2018-03-07Make tls_init() concurrently callable using pthread_once().Bob Beck
ok jsing@ This brings pthread_once usage into libressl, which will need to get dealt with correctly in portable. This sets us up to autoinit libtls, and we will also be using pthread_once to deal with autoinit stuff in libssl and libcrypto
2018-02-10Be more specific about when the session file will be updated.Joel Sing
2018-02-10Document functions for client-side TLS session support.Joel Sing
2017-10-08hyphenate DER/PEM-encoded, for consistency;Jason McIntyre
2017-10-07Document tls_peer_cert_chain_pem().Joel Sing
ok beck@
2017-08-12Document tls_config_set_dheparams().Joel Sing
2017-08-12Document tls_reset().Joel Sing
2017-08-11new sentence, new line;Jason McIntyre
2017-08-10Add a tls_config_set_ecdhecurves() function to libtls, which allows theJoel Sing
names of the elliptic curves that may be used during client and server key exchange to be specified. This deprecates tls_config_set_ecdhecurve(), which could only be used to specify a single supported curve. ok beck@
2017-08-01correct function name;Jason McIntyre
from carlos cardenas
2017-07-06Document tls_config_set_crl_file() and tls_config_set_crl_mem().Joel Sing
Based on a diff from Jack Burton <jack at saosce dot com dot au>, thanks!
2017-05-06Be explicit about when it is safe to call tls_config_free().Joel Sing
Discussed with beck@
2017-05-06Document tls_unload_file().Joel Sing
2017-04-27tls_free(3) and tls_config_free(3) accept NULL;Ingo Schwarze
patch from Matthew Martin <phy1729 at gmail dot com>, slightly tweaked by me
2017-03-02fix error in Dt; from robert kleinJason McIntyre
2017-02-20spelling fix;Jason McIntyre
2017-02-20document tls_config_error(3) RETURN VALUES, improve what is saidIngo Schwarze
about tls_error(3), and warn about some traps; OK jmc@
2017-01-31tweak previous;Jason McIntyre
2017-01-31Add tls_config_[add|set]keypair_ocsp functions so that ocsp staples may beBob Beck
added associated to a keypair used for SNI, and are usable for more than just the "main" certificate. Modify httpd to use this. Bump libtls minor. ok jsing@
2017-01-29Marko Kreen contributed significantly to the ocsp stuff for libtlsBob Beck
2017-01-28add HISTORY and AUTHORSIngo Schwarze
2017-01-27Fix Copyright notices; ok beck@ jsing@ tedu@Ingo Schwarze
2017-01-26fix Dt;Jason McIntyre
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-26 12:51:02 +0000