diff options
| author |   beck <beck@openbsd.org> | 2015-09-11 09:02:10 +0000 |
|---|---|---|
| committer | beck <beck@openbsd.org> | 2015-09-11 09:02:10 +0000 |
| commit | 1eda23257e9a0dd6d84dc5a3c6966f264dd81d01 (patch) | |
| tree | d7530a07cbd520f15ebec5b7d25161a1efa4c7ce /lib/libtls/tls_init.3 | |
| parent | change remaining mentions of "flags" to "request" and adapt text (diff) | |
| download | wireguard-openbsd-1eda23257e9a0dd6d84dc5a3c6966f264dd81d01.tar.xz wireguard-openbsd-1eda23257e9a0dd6d84dc5a3c6966f264dd81d01.zip | |
specify what is permitted as an argument to tls_config_set_ciphers()
Diffstat (limited to 'lib/libtls/tls_init.3')
| -rw-r--r-- | lib/libtls/tls_init.3 | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/lib/libtls/tls_init.3 b/lib/libtls/tls_init.3 index b6e9e5d276c..6197817f6ff 100644 --- a/lib/libtls/tls_init.3 +++ b/lib/libtls/tls_init.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: tls_init.3,v 1.36 2015/09/11 07:09:05 jmc Exp $ +.\" $OpenBSD: tls_init.3,v 1.37 2015/09/11 09:02:10 beck Exp $ .\" .\" Copyright (c) 2014 Ted Unangst <tedu@openbsd.org> .\" @@ -281,6 +281,16 @@ sets the public certificate directly from memory. .It .Fn tls_config_set_ciphers sets the list of ciphers that may be used. +Lists of ciphers are specified by name, and the +permitted names are: +.Pp +.Bl -tag -width "default" -offset indent -compact +.It Dv "secure" +.It Dv "default" (an alias for secure) +.It Dv "legacy" +.It Dv "compat" (an alias for legacy) +.El +.Pp .Em (Client and server) .It .Fn tls_config_set_key_file |