diff options
| author | Viktor Dukhovni <openssl-users@dukhovni.org> | 2015-12-29 09:19:24 +0100 |
|---|---|---|
| committer | Viktor Dukhovni <openssl-users@dukhovni.org> | 2016-01-02 16:48:35 +0100 |
| commit | 57ce7b617c602ae8513c22daa2bda31f179edb0f (patch) | |
| tree | 3f417c63b1752fbfaf4628aebe4d4f32c26aa0f5 /doc/ssl/SSL_CTX_set_options.pod | |
| parent | Add support for minimum and maximum protocol version (diff) | |
| download | openssl-57ce7b617c602ae8513c22daa2bda31f179edb0f.tar.xz openssl-57ce7b617c602ae8513c22daa2bda31f179edb0f.zip | |
Refine and re-wrap Min/Max protocol docs
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Diffstat (limited to '')
| -rw-r--r-- | doc/ssl/SSL_CTX_set_options.pod | 15 |
1 files changed, 11 insertions, 4 deletions
diff --git a/doc/ssl/SSL_CTX_set_options.pod b/doc/ssl/SSL_CTX_set_options.pod index bf7f7fd318..56f62cc59f 100644 --- a/doc/ssl/SSL_CTX_set_options.pod +++ b/doc/ssl/SSL_CTX_set_options.pod @@ -2,7 +2,9 @@ =head1 NAME -SSL_CTX_set_options, SSL_set_options, SSL_CTX_clear_options, SSL_clear_options, SSL_CTX_get_options, SSL_get_options, SSL_get_secure_renegotiation_support - manipulate SSL options +SSL_CTX_set_options, SSL_set_options, SSL_CTX_clear_options, +SSL_clear_options, SSL_CTX_get_options, SSL_get_options, +SSL_get_secure_renegotiation_support - manipulate SSL options =head1 SYNOPSIS @@ -153,10 +155,15 @@ own preferences. ... -=item SSL_OP_NO_SSLv3, SSL_OP_NO_TLSv1 +=item SSL_OP_NO_SSLv3, SSL_OP_NO_TLSv1, SSL_OP_NO_TLSv1_1, +SSL_OP_NO_TLSv1_2, SSL_OP_NO_DTLSv1, SSL_OP_NO_DTLSv1_2 -Do not use the SSLv3 or TLSv1 protocol, respectively. -You should avoid using those settings and instead use SSL_CTX_set_min_proto_version() and SSL_CTX_set_max_proto_version(). +These options turn off the SSLv3, TLSv1, TLSv1.1 or TLSv1.2 protocol +versions with TLS or the DTLSv1, DTLSv1.2 versions with DTLS, +respectively. +As of OpenSSL 1.1.0, these options are deprecated, use +L<SSL_CTX_set_min_proto_version(3)> and +L<SSL_CTX_set_max_proto_version(3)> instead. =item SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION |