wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update and clarify ciphers documentation.

Browse source 
Reviewed-by: Matt Caswell <matt@openssl.org>
This commit is contained in:
Dr. Stephen Henson 2015-11-13 23:34:29 +00:00
parent 9650919915
commit bf24ac9b54
1 changed files with 26 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

31
doc/apps/ciphers.pod
View file

@ -12,6 +12,10 @@ B<openssl> B<ciphers>
[B<-V>] [B<-V>]
[B<-ssl3>] [B<-ssl3>]
[B<-tls1>] [B<-tls1>]
[B<-tls1_1>]
[B<-tls1_2>]
[B<-s>]
[B<-psk>]
[B<-stdname>] [B<-stdname>]
[B<cipherlist>] [B<cipherlist>]
@ -31,6 +35,10 @@ Only list supported ciphers: those consistent with the security level. This
is the actual cipher list an application will support. If this option is is the actual cipher list an application will support. If this option is
not used then ciphers excluded by the security level will still be listed. not used then ciphers excluded by the security level will still be listed.
=item B<-psk>
When combined with B<-s> includes cipher suites which require PSK.
=item B<-v> =item B<-v>
Verbose option. List ciphers with a complete description of Verbose option. List ciphers with a complete description of
@ -44,11 +52,19 @@ Like B<-v>, but include cipher suite codes in output (hex format).
=item B<-ssl3> =item B<-ssl3>
only include SSL v3 ciphers. List the ciphers which would be used if SSL v3 was negotiated.
=item B<-tls1> =item B<-tls1>
only include TLS v1 ciphers. List the ciphers which would be used if TLS v1.0 was negotiated.
=item B<-tls1_1>
List the ciphers which would be used if TLS v1.1 was negotiated.
=item B<-tls1_2>
List the ciphers which would be used if TLS v1.2 was negotiated.
=item B<-stdname> =item B<-stdname>
@ -245,10 +261,15 @@ carry ECDH keys.
cipher suites using ECDSA authentication, i.e. the certificates carry ECDSA cipher suites using ECDSA authentication, i.e. the certificates carry ECDSA
keys. keys.
=item B<TLSv1.2>, B<TLSv1>, B<SSLv3> =item B<TLSv1.2>, B<TLSv1.0>, B<SSLv3>
TLS v1.2, TLS v1.0 or SSL v3.0 cipher suites respectively. Note: Lists ciphersuites which are only supported in at least TLS v1.2, TLS v1.0
there are no ciphersuites specific to TLS v1.1. or SSL v3.0 respectively. Note: there are no ciphersuites specific to TLS v1.1.
Since this is only the minimum version if, for example, TLS v1.0 is supported
then both TLS v1.0 and SSL v3.0 ciphersuites are included.
Note: these cipher strings B<do not> change the negotiated version of SSL or
TLS only the list of cipher suites.
=item B<AES128>, B<AES256>, B<AES> =item B<AES128>, B<AES256>, B<AES>