aboutsummaryrefslogtreecommitdiff
path: root/doc/apps
AgeCommit message (Collapse)AuthorFilesLines
2015-11-20Use better defaults for TSA.Dr. Stephen Henson1-4/+3
Use SHA256 for TSA and setted permitted digests to a sensible value. Based on PR#4141 Reviewed-by: Matt Caswell <matt@openssl.org>
2015-11-20Add support for signer_digest option in TS.Dr. Stephen Henson1-0/+12
Based on PR#2145 Reviewed-by: Matt Caswell <matt@openssl.org>
2015-11-14Update and clarify ciphers documentation.Dr. Stephen Henson1-5/+26
Reviewed-by: Matt Caswell <matt@openssl.org>
2015-11-13RT2667: Add IRC support to -starttlsNathan Phillip Brink1-2/+2
Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-11-02Fixed typo in rsautl.podSoheil Rashidi1-1/+1
Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-10-30Replace "SSLeay" in API with OpenSSLRich Salz4-7/+5
All instances of SSLeay (any combination of case) were replaced with the case-equivalent OpenSSL. Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-10-28Remove SSLeay history, etc., from docsRich Salz14-91/+13
If something was "present in all versions" of SSLeay, or if it was added to a version of SSLeay (and therefore predates OpenSSL), remove mention of it. Documentation history now starts with OpenSSL. Remove mention of all history before OpenSSL 0.9.8, inclusive. Remove all AUTHOR sections. Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-09-30Change the DEFAULT ciphersuites to exclude DES, RC4 and RC2Matt Caswell1-5/+6
This patch updates the "DEFAULT" cipherstring to be "ALL:!COMPLEMENTOFDEFAULT:!eNULL". COMPLEMENTOFDEFAULT is now defined internally by a flag on each ciphersuite indicating whether it should be excluded from DEFAULT or not. This gives us control at an individual ciphersuite level as to exactly what is in DEFAULT and what is not. Finally all DES, RC4 and RC2 ciphersuites are added to COMPLEMENTOFDEFAULT and hence removed from DEFAULT. Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-09-25Document -no-CApath and -no-CAfileMatt Caswell8-0/+80
Add documentation to all the appropriate apps for the new -no-CApath and -no-CAfile options. Reviewed-by: Andy Polyakov <appro@openssl.org>
2015-09-23Add -listen documentationMatt Caswell1-0/+19
This commit adds documentation for the new -listen option to s_server. Along the way it also adds documentation for -dtls, -dtls1 and -dtls1_2 which was missing. Reviewed-by: Andy Polyakov <appro@openssl.org>
2015-09-11Use default field separator.Dr. Stephen Henson1-1/+2
If the field separator isn't specified through -nameopt then use XN_FLAG_SEP_CPLUS_SPC instead of printing nothing and returing an error. PR#2397 Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-09-08Fix rehash/c_rehash doc and behavior.Rich Salz1-8/+14
Both now warn once if directory isn't writeable. Both now warn on file-write errors (multiple times). Update manpage to describe both program and script correctly. Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-09-06Add rehash command to opensslTimo Teras1-5/+12
On Unix/Linux platforms, merge c_rehash script into openssl as a C program. Signed-off-by: Rich Salz <rsalz@akamai.com> Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-08-31Remove asn1-kludge option.Dr. Stephen Henson1-22/+0
Remove asn1-kludge option from the req utility. It was a decade old workaround for CAs and software which required an invalid encoding of PKCS#10 certificate requests: omitting the attributes field even though it is not OPTIONAL. Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-08-27Various doc fixes.Rich Salz8-35/+40
Make all mention of digest algorithm use "any supported algorithm" RT2071, some new manpages from Victor B. Wagner <vitus@cryptocom.ru>: X509_LOOKUP_hash_dir.pod X509_check_ca.pod X509_check_issued.pod RT 1600: Remove references to non-existant objects(3) Add RETURN VALUES to BIO_do_accept page. RT1818: RSA_sign Can return values other than 0 on failure. RT3634: Fix AES CBC aliases (Steffen Nurpmeso <sdaoden@yandex.com>) RT3678: Some clarifications to BIO_new_pair (Devchandra L Meetei <dlmeetei@gmail.com>) RT3787: Fix some EVP_ function return values (Laetitia Baudoin <lbaudoin@google.com>) Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-08-26GH correct organizationalUnitNameViktor Dukhovni1-1/+1
Signed-off-by: Rich Salz <rsalz@akamai.com> Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-08-25RT4019: Duplicate -hmac flag in dgst.podMarkus Rinne1-5/+0
Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Emilia Käsper <emilia@openssl.org>
2015-08-25GH372: Remove duplicate flagsRich Salz1-6/+0
Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Emilia Käsper <emilia@openssl.org>
2015-08-21Fix L<> content in manpagesRich Salz42-148/+148
L<foo|foo> is sub-optimal If the xref is the same as the title, which is what we do, then you only need L<foo>. This fixes all 1457 occurrences in 349 files. Approximately. (And pod used to need both.) Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-08-14add CCM docsDr. Stephen Henson1-0/+29
Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-08-11Remove Gost94 signature algorithm.Rich Salz1-5/+0
This was obsolete in 2001. This is not the same as Gost94 digest. Thanks to Dmitry Belyavsky <beldmit@gmail.com> for review and advice. Reviewed-by: Matt Caswell <matt@openssl.org>
2015-07-31Various doc fixes from GH pull requestsRich Salz2-7/+6
Thanks folks: 348 Benjamin Kaduk 317 Christian Brueffer 254 Erik Tews 253 Erik Tews 219 Carl Mehner 155 (ghost) 95 mancha 51 DominikNeubauer Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2015-07-31RT3742: Add xmpp_server to s_client.Kai Engert1-3/+4
Reviewed-by: Matt Caswell <matt@openssl.org>
2015-07-30CAMELLIA PSK ciphersuites from RFC6367Dr. Stephen Henson1-0/+12
Reviewed-by: Matt Caswell <matt@openssl.org>
2015-07-30Add PSK ciphersuites to docsDr. Stephen Henson1-5/+60
Reviewed-by: Matt Caswell <matt@openssl.org>
2015-07-16Remove obsolete key formats.Rich Salz1-3/+1
Remove support for RSA_NET and Netscape key format (-keyform n). Also removed documentation of SGC. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
2015-07-14Can't use -trusted with -CA{path,file}Rich Salz1-4/+8
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
2015-07-07Extend -show_chain option to verify to show more infoMatt Caswell1-1/+8
The -show_chain flag to the verify command line app shows information about the chain that has been built. This commit adds the text "untrusted" against those certificates that have been used from the untrusted list. Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-07-07Add documentation for some missing verify optionsMatt Caswell1-0/+11
Fills in a couple of verify options that were lacking documentation. Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-07-07Document the nameopt changeRichard Levitte1-2/+2
Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-06-02RT3472: Doc pkcs8 -iter flag is in OpenSSL 1.1Jeffrey Walton1-3/+7
Reviewed-by: Matt Caswell <matt@openssl.org>
2015-05-26scrypt in pkcs8 utilDr. Stephen Henson1-0/+15
Add support for PKCS#8 private key encryption using the scrypt algorithm in the pkcs8 utility. Update documentation. Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-05-22Remove export static DH ciphersuitesMatt Caswell1-2/+0
Remove support for the two export grade static DH ciphersuites. These two ciphersuites were newly added (along with a number of other static DH ciphersuites) to 1.0.2. However the two export ones have *never* worked since they were introduced. It seems strange in any case to be adding new export ciphersuites, and given "logjam" it also does not seem correct to fix them. Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-05-22RT266: Add HTTP proxy/CONNECT to s_clientMichael Trapp1-0/+7
Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-05-20dhparam: fix documentationEmilia Kasper1-5/+8
The default bitlength is now 2048. Also clarify that either the number of bits or the generator must be present: $ openssl dhparam -2 and $ openssl dhparam 2048 generate parameters but $ openssl dhparam does not. Reviewed-by: Matt Caswell <matt@openssl.org>
2015-05-03Fixes some typos in doc/apps/Alok Menghrajani12-50/+50
Signed-off-by: Rich Salz <rsalz@akamai.com> Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-05-03fix various typo'sRich Salz1-2/+2
https://github.com/openssl/openssl/pull/176 (CHANGES) https://rt.openssl.org/Ticket/Display.html?id=3545 (objects.txt) https://rt.openssl.org/Ticket/Display.html?id=3796 (verify.pod) Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-04-25apps-cleanup: the doc fixesRich Salz3-13/+13
Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-04-08Drop CA.sh for CA.plRich Salz1-2/+2
Remove CA.sh script and use CA.pl for testing, etc. Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-03-24Configuration file examples.Dr. Stephen Henson1-0/+53
Reviewed-by: Matt Caswell <matt@openssl.org>
2015-03-12additional configuration documentationDr. Stephen Henson1-2/+20
Reviewed-by: Andy Polyakov <appro@openssl.org>
2015-02-26Removed support for SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG. Also removedMatt Caswell1-6/+0
the "-hack" option from s_server that set this option. Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-02-25Add documentation for the -no_alt_chains option for various apps, as well asMatt Caswell6-17/+51
the X509_V_FLAG_NO_ALT_CHAINS flag. Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2015-02-24Document -no_explicitDr. Stephen Henson1-2/+8
Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-02-21Add additional EC documentation.Dr. Stephen Henson1-5/+30
Reviewed-by: Matt Caswell <matt@openssl.org>
2015-01-27Dead code removal: Fortezza identifiersRich Salz1-5/+0
Not interested in helping the NSA in the slightest. And anyway, it was never implemented, #if'd out. Reviewed-by: Richard Levitte <levitte@openssl.org>
2014-12-30Document openssl dgst -hmac optionThorsten Glaser1-0/+11
Signed-off-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Richard Levitte <levitte@openssl.org>
2014-12-04Remove SSLv2 supportKurt Roeckx5-51/+14
The only support for SSLv2 left is receiving a SSLv2 compatible client hello. Reviewed-by: Richard Levitte <levitte@openssl.org>
2014-11-27Add documentation on -timeout option in the ocsp utilityAndré Guerreiro1-0/+4
PR#3612 Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2014-11-10Fix spelling of EECDHKurt Roeckx1-1/+1
Reviewed-by: Matt Caswell <matt@openssl.org>
generated by cgit v1.1 at 2024-07-13 11:00:31 +0000