aboutsummaryrefslogtreecommitdiff
path: root/doc
AgeCommit message (Collapse)AuthorFilesLines
2015-12-07Document EVP_MD constructors, destructors and manipulatorsRichard Levitte1-0/+160
Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-12-07Document the HMAC changesRichard Levitte1-13/+24
Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-12-07Document the EVP_MD_CTX changesRichard Levitte5-43/+43
Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-12-07Document the changed HMAC API.Richard Levitte1-4/+6
Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-12-06Fix typo and improve a bit of textViktor Dukhovni1-4/+5
Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-12-06Really disable 56-bit (single-DES) ciphersViktor Dukhovni1-14/+3
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
2015-12-05Remove support for all 40 and 56 bit ciphers.Kurt Roeckx6-223/+0
Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #364
2015-12-04Remove SSL_{CTX_}set_ecdh_auto() and always enable ECDHKurt Roeckx1-25/+3
Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2015-12-02Remove RSA_FLAG_SIGN_VER flag.Dr. Stephen Henson1-7/+0
Remove RSA_FLAG_SIGN_VER: this was origininally used to retain binary compatibility after RSA_METHOD was extended to include rsa_sign and rsa_verify fields. It is no longer needed. Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-12-02Remove legacy sign/verify from EVP_MD.Dr. Stephen Henson1-10/+4
Remove sign/verify and required_pkey_type fields of EVP_MD: these are a legacy from when digests were linked to public key types. All signing is now handled by the corresponding EVP_PKEY_METHOD. Only allow supported digest types in RSA EVP_PKEY_METHOD: other algorithms already block unsupported types. Remove now obsolete EVP_dss1() and EVP_ecdsa(). Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-12-01ex_data part 2: doc fixes and CRYPTO_free_ex_index.Rich Salz16-524/+190
Add CRYPTO_free_ex_index (for shared libraries) Unify and complete the documentation for all "ex_data" API's and objects. Replace xxx_get_ex_new_index functions with a macro. Added an exdata test. Renamed the ex_data internal datatypes. Reviewed-by: Matt Caswell <matt@openssl.org>
2015-11-30Remove BN_initRich Salz1-20/+2
Rename it to be an internal function bn_init. Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-11-28Correct aes-128-cbc cipher nameViktor Dukhovni2-2/+2
Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-11-26Add documentation for BN_with_flagsMatt Caswell1-1/+31
Following on from the previous commit this adds some documentation for the BN_with_flags function which is easy to misuse. Reviewed-by: Emilia Käsper <emilia@openssl.org>
2015-11-21Turn B<...()> into ...()Rich Salz12-48/+48
For all functions, consistently use asdf() not B<asdf()> Reviewed-by: Kurt Roeckx <kurt@openssl.org>
2015-11-20Convert __thread to pthreads for Thread Local StorageMatt Caswell1-22/+30
In theory the pthreads approach for Thread Local Storage should be more portable. This also changes some APIs in order to accommodate this change. In particular ASYNC_init_pool is renamed ASYNC_init_thread and ASYNC_free_pool is renamed ASYNC_cleanup_thread. Also introduced ASYNC_init and ASYNC_cleanup. Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-11-20Add ASYNC_block_pause and ASYNC_unblock_pauseMatt Caswell1-1/+18
There are potential deadlock situations that can occur if code executing within the context of a job aquires a lock, and then pauses the job. This adds an ability to temporarily block pauses from occuring whilst performing work and holding a lock. Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-11-20Add clarification to docs on ASYNC_free_pool()Matt Caswell1-10/+14
Clarify that you must only call this after all async jobs have completed - otherwise you could get memory leaks. Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-11-20Tweak async documentation based on feedbackMatt Caswell3-13/+20
Add some clarifications to the async documentation. Also changed ASYNC_pause_job() so that it returns success if you are not within the context of a job. This is so that engines can be used either asynchronously or synchronously and can treat an error from ASYNC_pause_job() as a real error. Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-11-20More async documentationMatt Caswell5-1/+88
Document the libssl and command line application aspects of async. Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-11-20Document async capabilitiesMatt Caswell1-0/+242
Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-11-20BN_sub: document that r might be the same as a or bKurt Roeckx1-0/+1
Reviewed-by: Rich Salz <rsalz@akamai.com> RT #4100, MR #1264
2015-11-20Use better defaults for TSA.Dr. Stephen Henson1-4/+3
Use SHA256 for TSA and setted permitted digests to a sensible value. Based on PR#4141 Reviewed-by: Matt Caswell <matt@openssl.org>
2015-11-20Add support for signer_digest option in TS.Dr. Stephen Henson1-0/+12
Based on PR#2145 Reviewed-by: Matt Caswell <matt@openssl.org>
2015-11-14Document new functionsDr. Stephen Henson3-2/+65
Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-11-14Update and clarify ciphers documentation.Dr. Stephen Henson1-5/+26
Reviewed-by: Matt Caswell <matt@openssl.org>
2015-11-13RT2667: Add IRC support to -starttlsNathan Phillip Brink1-2/+2
Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-11-10Fix SSL_use_certificate_chain_fileMatt Caswell1-3/+9
The new function SSL_use_certificate_chain_file was always crashing in the internal function use_certificate_chain_file because it would pass a NULL value for SSL_CTX *, but use_certificate_chain_file would unconditionally try to dereference it. Reviewed-by: Stephen Henson <steve@openssl.org>
2015-11-04Minor EVP_SignInit_ex doc fixMatt Caswell1-1/+2
EVP_SignInit_ex was missing from the NAME section of its man page so typing "man EVP_SignInit_ex" failed to load the page. Reviewed-by: Stephen Henson <steve@openssl.org>
2015-11-02Remove dummy argument from BIO_get_bind_modeRichard Levitte1-1/+1
Reviewed-by: Andy Polyakov <appro@openssl.org>
2015-11-02Document how BIO_get_conn_ip and BIO_get_conn_int_port actually workRichard Levitte1-2/+2
No dummy arguments. Reviewed-by: Andy Polyakov <appro@openssl.org>
2015-11-02Fixed typo in rsautl.podSoheil Rashidi1-1/+1
Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-10-30Replace "SSLeay" in API with OpenSSLRich Salz8-88/+16
All instances of SSLeay (any combination of case) were replaced with the case-equivalent OpenSSL. Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-10-30Remove some SSLv2 referencesMatt Caswell5-30/+10
There were a few remaining references to SSLv2 support which are no longer relevant now that it has been removed. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-10-30Remove SSL_state and SSL_set_stateMatt Caswell1-1/+1
SSL_state has been replaced by SSL_get_state and SSL_set_state is no longer supported. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-10-30Change HANDSHAKE_STATE to OSSL_HANDSHAKE_STATEMatt Caswell1-1/+1
Rename the enum HANDSHAKE_STATE to OSSL_HANDSHAKE_STATE to ensure there are no namespace clashes, and convert it into a typedef. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-10-30Minor documentation tweakMatt Caswell1-1/+3
Update the return type for SSL_state in the documentation. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-10-28Remove SSLeay history, etc., from docsRich Salz156-1110/+68
If something was "present in all versions" of SSLeay, or if it was added to a version of SSLeay (and therefore predates OpenSSL), remove mention of it. Documentation history now starts with OpenSSL. Remove mention of all history before OpenSSL 0.9.8, inclusive. Remove all AUTHOR sections. Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-10-27Remove HAMC_cleanupRich Salz1-6/+1
Old API for use with OpenSSL-0.9.6. Remove it. Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-10-23Fix typosAlessandro Ghedini6-8/+8
Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-10-22Clarify return values for EVP_DigestVerifyFinal.Adam Eijdenberg1-4/+5
Previous language was unclear. New language isn't pretty but I believe it is more accurate. Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Ben Laurie <ben@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-10-21Don't use SSLv23_server_method in an exampleMatt Caswell1-1/+1
The function SSLv23_server_method() is an old name. New code should use TLS_server_method() instead. Therefore don't use SSLv23_server_method() in an example in the docs. Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-10-15Remove Obsolete enginesMatt Caswell1-6/+0
There are a number of engines in the OpenSSL source code which are now obsolete. The following engines have been removed: 4758cca, aep, atalla, cswift, nuron, sureware. Reviewed-by: Rich Salz <rsalz@openssl.org>
2015-09-30Change the DEFAULT ciphersuites to exclude DES, RC4 and RC2Matt Caswell1-5/+6
This patch updates the "DEFAULT" cipherstring to be "ALL:!COMPLEMENTOFDEFAULT:!eNULL". COMPLEMENTOFDEFAULT is now defined internally by a flag on each ciphersuite indicating whether it should be excluded from DEFAULT or not. This gives us control at an individual ciphersuite level as to exactly what is in DEFAULT and what is not. Finally all DES, RC4 and RC2 ciphersuites are added to COMPLEMENTOFDEFAULT and hence removed from DEFAULT. Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-09-25Document -no-CApath and -no-CAfileMatt Caswell8-0/+80
Add documentation to all the appropriate apps for the new -no-CApath and -no-CAfile options. Reviewed-by: Andy Polyakov <appro@openssl.org>
2015-09-25Document the default CA path functionsMatt Caswell2-1/+34
Reviewed-by: Andy Polyakov <appro@openssl.org>
2015-09-23Clarify DTLSv1_listen documentationMatt Caswell1-2/+6
Clarify that user code is required to allocate sufficient space for the addressing scheme in use in the call to DTLSv1_listen. Reviewed-by: Andy Polyakov <appro@openssl.org>
2015-09-23Add DTLSv1_listen documentationMatt Caswell2-1/+93
Adds a new man page to cover the DTLSv1_listen() function. Reviewed-by: Andy Polyakov <appro@openssl.org>
2015-09-23Add -listen documentationMatt Caswell1-0/+19
This commit adds documentation for the new -listen option to s_server. Along the way it also adds documentation for -dtls, -dtls1 and -dtls1_2 which was missing. Reviewed-by: Andy Polyakov <appro@openssl.org>
2015-09-22Document X509_get0_subject_key_id()Dr. Stephen Henson1-3/+18
Reviewed-by: Rich Salz <rsalz@openssl.org>
generated by cgit v1.1 at 2024-09-15 07:59:52 +0000