WARNING! Gitlab maintenance operation scheduled for Monday, 20 April between 12:00 and 14:00 (CET). During this time window, short service interruptions (less than 5 minutes) may occur. Thank you in advance for your understanding.

Unverified Commit 7e590b3e authored May 27, 2019 by Daniel Stenberg

tls13-docs: mention it is only for OpenSSL >= 1.1.1

Reported-by: Jay Satiro
Co-authored-by: Jay Satiro
Fixes #3938
Closes #3946

parent ca09d965

docs/CIPHERS.md

+3 −2

Original line number	Diff line number	Diff line
		@@ -6,11 +6,12 @@ and
		[`--ciphers`](https://curl.haxx.se/docs/manpage.html#--ciphers)
		users can control which ciphers to consider when negotiating TLS connections.

		TLS 1.3 ciphers are supported since curl 7.61 with options
		TLS 1.3 ciphers are supported since curl 7.61 for OpenSSL 1.1.1+ with options
		[`CURLOPT_TLS13_CIPHERS`](https://curl.haxx.se/libcurl/c/CURLOPT_TLS13_CIPHERS.html)
		and
		[`--tls13-ciphers`](https://curl.haxx.se/docs/manpage.html#--tls13-ciphers)
		.
		. If you are using a different SSL backend you can try setting TLS 1.3 cipher
		suites by using the respective regular cipher option.

		The names of the known ciphers differ depending on which TLS backend that
		libcurl was built to use. This is an attempt to list known cipher names.

docs/cmdline-opts/proxy-tls13-ciphers.d

+4 −0

Original line number	Diff line number	Diff line
		@@ -9,4 +9,8 @@ ciphers. Read up on TLS 1.3 cipher suite details on this URL:

		https://curl.haxx.se/docs/ssl-ciphers.html

		This option is currently used only when curl is built to use OpenSSL 1.1.1 or
		later. If you are using a different SSL backend you can try setting TLS 1.3
		cipher suites by using the --proxy-ciphers option.

		If this option is used several times, the last one will be used.

docs/cmdline-opts/tls13-ciphers.d

+4 −0

Original line number	Diff line number	Diff line
		@@ -9,4 +9,8 @@ cipher suite details on this URL:

		https://curl.haxx.se/docs/ssl-ciphers.html

		This option is currently used only when curl is built to use OpenSSL 1.1.1 or
		later. If you are using a different SSL backend you can try setting TLS 1.3
		cipher suites by using the --ciphers option.

		If this option is used several times, the last one will be used.

docs/libcurl/opts/CURLOPT_PROXY_TLS13_CIPHERS.3

+4 −0

Original line number	Diff line number	Diff line
		@@ -37,6 +37,10 @@ You'll find more details about cipher lists on this URL:

		https://curl.haxx.se/docs/ssl-ciphers.html

		This option is currently used only when curl is built to use OpenSSL 1.1.1 or
		later. If you are using a different SSL backend you can try setting TLS 1.3
		cipher suites by using the CURLOPT_PROXY_SSL_CIPHER_LIST option.

		The application does not have to keep the string around after setting this
		option.
		.SH DEFAULT

docs/libcurl/opts/CURLOPT_TLS13_CIPHERS.3

+4 −0

Original line number	Diff line number	Diff line
		@@ -36,6 +36,10 @@ You'll find more details about cipher lists on this URL:

		https://curl.haxx.se/docs/ssl-ciphers.html

		This option is currently used only when curl is built to use OpenSSL 1.1.1 or
		later. If you are using a different SSL backend you can try setting TLS 1.3
		cipher suites by using the CURLOPT_SSL_CIPHER_LIST option.

		The application does not have to keep the string around after setting this
		option.
		.SH DEFAULT