wireguard-openbsd/lib/libssl/man/SSL_CTX_set_cipher_list.3, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libssl/man/SSL_CTX_set_cipher_list.3?h=jd%2Fqueueboosts 2020-04-25T14:03:38Z Move unsupported, obsolete ciphers and deprecated aliases out of 2020-04-25T14:03:38Z schwarze schwarze@openbsd.org 2020-04-25T14:03:38Z urn:sha1:29f9efbb9be16ce23c3aae89333cc03090345988 the main list of words to make it more readable, even though it remains long. Avoid using deprecated aliases in explanations what other words mean. Stop documenting aDSS because it is *both* a deprecated alias *and* no longer matches anything at all. General direction discussed with jsing@ some time ago. tweak the wording to make it clearer under which conditions exactly 2020-04-25T13:50:05Z schwarze schwarze@openbsd.org 2020-04-25T13:50:05Z urn:sha1:5b7cde6d9c4bfc6e13c35a2473d2f53e6bbcb2c8 the TLSv1.3 cipher suites are made available, too; related to ssl_ciph.c rev. 1.115 add the missing sentence "LibreSSL no longer provides any such 2020-04-14T13:02:28Z schwarze schwarze@openbsd.org 2020-04-14T13:02:28Z urn:sha1:69906cb2d6212fc308a4388078b82fd4d2251599 cipher suites" to the DES entry and use the same wording for DSS; OK jsing@ Delete the three sentences listing the ciphers currently included 2020-04-14T11:57:31Z schwarze schwarze@openbsd.org 2020-04-14T11:57:31Z urn:sha1:65436a87284a77462baf64f113d8c718e6d86b32 in LOW, MEDIUM, and HIGH. That's going to change repeatedly and the extra maintenance effort for keeping it up to date is a waste because people can trivially run "openssl ciphers -v LOW" to look it up. Besides, updating it will usually be forgotten; the LOW entry was already wrong. Suggested by jsing@. Document the TLSv1.3 control word, update the description of the 2020-04-11T14:01:59Z schwarze schwarze@openbsd.org 2020-04-11T14:01:59Z urn:sha1:9b0d0532bb0d70849d35ef8d04ab6dbb16d66e01 TLSv1 control word, and explain how TLSv1.3 cipher suites can be configured in LibreSSL and in OpenSSL. While here, also mention how users can inspect the DEFAULT list of cipher suites. Stimulus, feedback and OK from jsing@. spelling; from bryan stenson 2019-12-19T20:23:25Z jmc jmc@openbsd.org 2019-12-19T20:23:25Z urn:sha1:4d9e9af5ecf2c8e434f0b2feaeb172c581cb8d2b Fix typo: ECHD -> ECDH. 2019-12-03T06:53:04Z tb tb@openbsd.org 2019-12-03T06:53:04Z urn:sha1:821aec3789544718582e743eb4e19bc969039903 From Michael Forney, thanks! *an* RSA; 2019-05-20T06:04:45Z jmc jmc@openbsd.org 2019-05-20T06:04:45Z urn:sha1:cf72297a07bc18f7cdef124444310b28fb40242c Write documentation for the control string parameter from scratch, 2018-04-10T21:37:20Z schwarze schwarze@openbsd.org 2018-04-10T21:37:20Z urn:sha1:6c01a6273261919588aff02cdfb86bafb5289a5f collecting the information by inspecting the source code. found a complete archive of SSLeay-0.4 to SSLeay-0.8.1b tarballs 2018-03-27T17:35:50Z schwarze schwarze@openbsd.org 2018-03-27T17:35:50Z urn:sha1:10e00d1796876719ecd5784348f9f4f2b3dd83c5 on the web, so fix up SSLeay HISTORY accordingly