Unverified Commit 7e590b3e authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

tls13-docs: mention it is only for OpenSSL >= 1.1.1 

Reported-by: Jay Satiro
Co-authored-by: Jay Satiro
Fixes #3938
Closes #3946
parent ca09d965

docs/CIPHERS.md

+3 −2
Original line number Original line Diff line number Diff line
@@ -6,11 +6,12 @@ and 
[`--ciphers`](https://curl.haxx.se/docs/manpage.html#--ciphers)

[`--ciphers`](https://curl.haxx.se/docs/manpage.html#--ciphers)

users can control which ciphers to consider when negotiating TLS connections.

users can control which ciphers to consider when negotiating TLS connections.





TLS 1.3 ciphers are supported since curl 7.61 with options

TLS 1.3 ciphers are supported since curl 7.61 for OpenSSL 1.1.1+ with options

[`CURLOPT_TLS13_CIPHERS`](https://curl.haxx.se/libcurl/c/CURLOPT_TLS13_CIPHERS.html)

[`CURLOPT_TLS13_CIPHERS`](https://curl.haxx.se/libcurl/c/CURLOPT_TLS13_CIPHERS.html)

and

and

[`--tls13-ciphers`](https://curl.haxx.se/docs/manpage.html#--tls13-ciphers)

[`--tls13-ciphers`](https://curl.haxx.se/docs/manpage.html#--tls13-ciphers)

.

. If you are using a different SSL backend you can try setting TLS 1.3 cipher

suites by using the respective regular cipher option.





The names of the known ciphers differ depending on which TLS backend that

The names of the known ciphers differ depending on which TLS backend that

libcurl was built to use. This is an attempt to list known cipher names.

libcurl was built to use. This is an attempt to list known cipher names.

docs/cmdline-opts/proxy-tls13-ciphers.d

+4 −0
Original line number Original line Diff line number Diff line
@@ -9,4 +9,8 @@ ciphers. Read up on TLS 1.3 cipher suite details on this URL: 




 https://curl.haxx.se/docs/ssl-ciphers.html

 https://curl.haxx.se/docs/ssl-ciphers.html





This option is currently used only when curl is built to use OpenSSL 1.1.1 or

later. If you are using a different SSL backend you can try setting TLS 1.3

cipher suites by using the --proxy-ciphers option.



If this option is used several times, the last one will be used.
 
If this option is used several times, the last one will be used.

docs/cmdline-opts/tls13-ciphers.d

+4 −0
Original line number Original line Diff line number Diff line
@@ -9,4 +9,8 @@ cipher suite details on this URL: 




 https://curl.haxx.se/docs/ssl-ciphers.html

 https://curl.haxx.se/docs/ssl-ciphers.html





This option is currently used only when curl is built to use OpenSSL 1.1.1 or

later. If you are using a different SSL backend you can try setting TLS 1.3

cipher suites by using the --ciphers option.



If this option is used several times, the last one will be used.
 
If this option is used several times, the last one will be used.

docs/libcurl/opts/CURLOPT_PROXY_TLS13_CIPHERS.3

+4 −0
Original line number Original line Diff line number Diff line
@@ -37,6 +37,10 @@ You'll find more details about cipher lists on this URL: 




 https://curl.haxx.se/docs/ssl-ciphers.html

 https://curl.haxx.se/docs/ssl-ciphers.html





This option is currently used only when curl is built to use OpenSSL 1.1.1 or

later. If you are using a different SSL backend you can try setting TLS 1.3

cipher suites by using the CURLOPT_PROXY_SSL_CIPHER_LIST option.



The application does not have to keep the string around after setting this

The application does not have to keep the string around after setting this

option.

option.

.SH DEFAULT

.SH DEFAULT

docs/libcurl/opts/CURLOPT_TLS13_CIPHERS.3

+4 −0
Original line number Original line Diff line number Diff line
@@ -36,6 +36,10 @@ You'll find more details about cipher lists on this URL: 




 https://curl.haxx.se/docs/ssl-ciphers.html

 https://curl.haxx.se/docs/ssl-ciphers.html





This option is currently used only when curl is built to use OpenSSL 1.1.1 or

later. If you are using a different SSL backend you can try setting TLS 1.3

cipher suites by using the CURLOPT_SSL_CIPHER_LIST option.



The application does not have to keep the string around after setting this

The application does not have to keep the string around after setting this

option.

option.

.SH DEFAULT

.SH DEFAULT