diff options
author | raja-ashok <rashok.svks@gmail.com> | 2019-05-11 19:58:26 +0200 |
---|---|---|
committer | Matt Caswell <matt@openssl.org> | 2019-06-12 11:18:34 +0200 |
commit | dfa1f5476e86f330f708c1396f577c01d10c545c (patch) | |
tree | 7cf6ac5ac31df67258d87699901bb112de9e0b6d /doc/man3/SSL_CONF_cmd.pod | |
parent | Add testcase for TLS1.3 FFDHE (diff) | |
download | openssl-dfa1f5476e86f330f708c1396f577c01d10c545c.tar.xz openssl-dfa1f5476e86f330f708c1396f577c01d10c545c.zip |
Update docs for TLS1.3 FFDHE
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/8178)
Diffstat (limited to 'doc/man3/SSL_CONF_cmd.pod')
-rw-r--r-- | doc/man3/SSL_CONF_cmd.pod | 20 |
1 files changed, 14 insertions, 6 deletions
diff --git a/doc/man3/SSL_CONF_cmd.pod b/doc/man3/SSL_CONF_cmd.pod index 5c58268f49..227d9de377 100644 --- a/doc/man3/SSL_CONF_cmd.pod +++ b/doc/man3/SSL_CONF_cmd.pod @@ -79,9 +79,13 @@ B<ClientHello>. The B<value> argument is a colon separated list of groups. The group can be either the B<NIST> name (e.g. B<P-256>), some other commonly used name where -applicable (e.g. B<X25519>) or an OpenSSL OID name (e.g B<prime256v1>). Group -names are case sensitive. The list should be in order of preference with the -most preferred group first. +applicable (e.g. B<X25519>, B<ffdhe2048>) or an OpenSSL OID name +(e.g B<prime256v1>). Group names are case sensitive. The list should be in +order of preference with the most preferred group first. + +Currently supported groups for B<TLSv1.3> are B<P-256>, B<P-384>, B<P-521>, +B<X25519>, B<X448>, B<ffdhe2048>, B<ffdhe3072>, B<ffdhe4096>, B<ffdhe6144>, +B<ffdhe8192>. =item B<-curves> @@ -356,9 +360,13 @@ B<ClientHello>. The B<value> argument is a colon separated list of groups. The group can be either the B<NIST> name (e.g. B<P-256>), some other commonly used name where -applicable (e.g. B<X25519>) or an OpenSSL OID name (e.g B<prime256v1>). Group -names are case sensitive. The list should be in order of preference with the -most preferred group first. +applicable (e.g. B<X25519>, B<ffdhe2048>) or an OpenSSL OID name +(e.g B<prime256v1>). Group names are case sensitive. The list should be in +order of preference with the most preferred group first. + +Currently supported groups for B<TLSv1.3> are B<P-256>, B<P-384>, B<P-521>, +B<X25519>, B<X448>, B<ffdhe2048>, B<ffdhe3072>, B<ffdhe4096>, B<ffdhe6144>, +B<ffdhe8192>. =item B<Curves> |