summaryrefslogtreecommitdiffstats
path: root/doc/man3/SSL_CONF_cmd.pod
diff options
context:
space:
mode:
authorraja-ashok <rashok.svks@gmail.com>2019-05-11 19:58:26 +0200
committerMatt Caswell <matt@openssl.org>2019-06-12 11:18:34 +0200
commitdfa1f5476e86f330f708c1396f577c01d10c545c (patch)
tree7cf6ac5ac31df67258d87699901bb112de9e0b6d /doc/man3/SSL_CONF_cmd.pod
parentAdd testcase for TLS1.3 FFDHE (diff)
downloadopenssl-dfa1f5476e86f330f708c1396f577c01d10c545c.tar.xz
openssl-dfa1f5476e86f330f708c1396f577c01d10c545c.zip
Update docs for TLS1.3 FFDHE
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/8178)
Diffstat (limited to 'doc/man3/SSL_CONF_cmd.pod')
-rw-r--r--doc/man3/SSL_CONF_cmd.pod20
1 files changed, 14 insertions, 6 deletions
diff --git a/doc/man3/SSL_CONF_cmd.pod b/doc/man3/SSL_CONF_cmd.pod
index 5c58268f49..227d9de377 100644
--- a/doc/man3/SSL_CONF_cmd.pod
+++ b/doc/man3/SSL_CONF_cmd.pod
@@ -79,9 +79,13 @@ B<ClientHello>.
The B<value> argument is a colon separated list of groups. The group can be
either the B<NIST> name (e.g. B<P-256>), some other commonly used name where
-applicable (e.g. B<X25519>) or an OpenSSL OID name (e.g B<prime256v1>). Group
-names are case sensitive. The list should be in order of preference with the
-most preferred group first.
+applicable (e.g. B<X25519>, B<ffdhe2048>) or an OpenSSL OID name
+(e.g B<prime256v1>). Group names are case sensitive. The list should be in
+order of preference with the most preferred group first.
+
+Currently supported groups for B<TLSv1.3> are B<P-256>, B<P-384>, B<P-521>,
+B<X25519>, B<X448>, B<ffdhe2048>, B<ffdhe3072>, B<ffdhe4096>, B<ffdhe6144>,
+B<ffdhe8192>.
=item B<-curves>
@@ -356,9 +360,13 @@ B<ClientHello>.
The B<value> argument is a colon separated list of groups. The group can be
either the B<NIST> name (e.g. B<P-256>), some other commonly used name where
-applicable (e.g. B<X25519>) or an OpenSSL OID name (e.g B<prime256v1>). Group
-names are case sensitive. The list should be in order of preference with the
-most preferred group first.
+applicable (e.g. B<X25519>, B<ffdhe2048>) or an OpenSSL OID name
+(e.g B<prime256v1>). Group names are case sensitive. The list should be in
+order of preference with the most preferred group first.
+
+Currently supported groups for B<TLSv1.3> are B<P-256>, B<P-384>, B<P-521>,
+B<X25519>, B<X448>, B<ffdhe2048>, B<ffdhe3072>, B<ffdhe4096>, B<ffdhe6144>,
+B<ffdhe8192>.
=item B<Curves>