Commit 71ff1777 authored by Lutz Jänicke's avatar Lutz Jänicke
Browse files

Documentation about ephemeral key exchange

parent 5b605106

doc/ssl/SSL_CTX_set_cipher_list.pod

+5 −2
Original line number Diff line number Diff line
@@ -39,8 +39,9 @@ certificate and key. 
A RSA cipher can only be chosen, when a RSA certificate is available.

RSA export ciphers with a keylength of 512 bits for the RSA key require

a temporary 512 bit RSA key, as typically the supplied key has a length

of 1024 bit. RSA ciphers using EDH need a certificate and key and

additional DH-parameters.

of 1024 bit (see

L<SSL_CTX_set_tmp_rsa_callback(3)|SSL_CTX_set_tmp_rsa_callback(3)>).

RSA ciphers using EDH need a certificate and key and additional DH-parameters.



A DSA cipher can only be chosen, when a DSA certificate is available.

DSA ciphers always use DH key exchange and therefore need DH-parameters.
@@ -60,6 +61,8 @@ could be selected and 0 on complete failure. 


L<ssl(3)|ssl(3)>, L<SSL_get_ciphers(3)|SSL_get_ciphers(3)>,

L<SSL_CTX_use_certificate(3)|SSL_CTX_use_certificate(3)>,

L<SSL_CTX_set_tmp_rsa_callback(3)|SSL_CTX_set_tmp_rsa_callback(3)>,

L<SSL_CTX_set_tmp_dh_callback(3)|SSL_CTX_set_tmp_dh_callback(3)>,

L<ciphers(1)|ciphers(1)>



=cut

doc/ssl/SSL_CTX_set_options.pod

+7 −3
Original line number Diff line number Diff line
@@ -122,11 +122,13 @@ The following B<modifying> options are available: 


=item SSL_OP_SINGLE_DH_USE



Always create a new key when using temporary DH parameters.

Always create a new key when using temporary DH parameters

(see L<SSL_CTX_set_tmp_dh_callback(3)|SSL_CTX_set_tmp_dh_callback(3)>).



=item SSL_OP_EPHEMERAL_RSA



Also use the temporary RSA key when doing RSA operations.

Also use ephemeral (temporary) RSA key when doing RSA operations

(see L<SSL_CTX_set_tmp_rsa_callback(3)|SSL_CTX_set_tmp_rsa_callback(3)>).



=item SSL_OP_PKCS1_CHECK_1
@@ -174,7 +176,9 @@ SSL_CTX_get_options() and SSL_get_options() return the current bitmask. 


=head1 SEE ALSO



L<ssl(3)|ssl(3)>, L<SSL_new(3)|SSL_new(3)>, L<SSL_clear(3)|SSL_clear(3)>

L<ssl(3)|ssl(3)>, L<SSL_new(3)|SSL_new(3)>, L<SSL_clear(3)|SSL_clear(3)>,

L<SSL_CTX_set_tmp_dh_callback(3)|SSL_CTX_set_tmp_dh_callback(3)>,

L<SSL_CTX_set_tmp_rsa_callback(3)|SSL_CTX_set_tmp_rsa_callback(3)>



=head1 HISTORY

doc/ssl/ssl.pod

+2 −0
Original line number Diff line number Diff line
@@ -669,6 +669,8 @@ L<SSL_CTX_set_session_cache_mode(3)|SSL_CTX_set_session_cache_mode(3)>, 
L<SSL_CTX_set_session_id_context(3)|SSL_CTX_set_session_id_context(3)>,

L<SSL_CTX_set_ssl_version(3)|SSL_CTX_set_ssl_version(3)>,

L<SSL_CTX_set_timeout(3)|SSL_CTX_set_timeout(3)>,

L<SSL_CTX_set_tmp_rsa_callback(3)|SSL_CTX_set_tmp_rsa_callback(3)>,

L<SSL_CTX_set_tmp_dh_callback(3)|SSL_CTX_set_tmp_dh_callback(3)>,

L<SSL_CTX_set_verify(3)|SSL_CTX_set_verify(3)>,

L<SSL_CTX_use_certificate(3)|SSL_CTX_use_certificate(3)>,

L<SSL_get_ciphers(3)|SSL_get_ciphers(3)>,