Document X509_verify_ex() and X509_REQ_verify_ex()

[openssl.git] / doc / man3 / SSL_CTX_set_mode.pod

diff --git a/doc/man3/SSL_CTX_set_mode.pod b/doc/man3/SSL_CTX_set_mode.pod
index de4d5f26ac3b5f4f3d3c8c9fff9a36374db642a9..6cdf8362c63f4d91f1785654ed81693165c15419 100644 (file)
--- a/doc/man3/SSL_CTX_set_mode.pod
+++ b/doc/man3/SSL_CTX_set_mode.pod
@@ -18,13 +18,13 @@ SSL_CTX_set_mode, SSL_CTX_clear_mode, SSL_set_mode, SSL_clear_mode, SSL_CTX_get_
 
 =head1 DESCRIPTION
 
 
 =head1 DESCRIPTION
 

-SSL_CTX_set_mode() adds the mode set via bitmask in B<mode> to B<ctx>.
+SSL_CTX_set_mode() adds the mode set via bit-mask in B<mode> to B<ctx>.

 Options already set before are not cleared.
 Options already set before are not cleared.

-SSL_CTX_clear_mode() removes the mode set via bitmask in B<mode> from B<ctx>.
+SSL_CTX_clear_mode() removes the mode set via bit-mask in B<mode> from B<ctx>.

 
 

-SSL_set_mode() adds the mode set via bitmask in B<mode> to B<ssl>.
+SSL_set_mode() adds the mode set via bit-mask in B<mode> to B<ssl>.

 Options already set before are not cleared.
 Options already set before are not cleared.

-SSL_clear_mode() removes the mode set via bitmask in B<mode> from B<ssl>.
+SSL_clear_mode() removes the mode set via bit-mask in B<mode> from B<ssl>.

 
 SSL_CTX_get_mode() returns the mode set for B<ctx>.
 
 
 SSL_CTX_get_mode() returns the mode set for B<ctx>.
 


@@ -121,6 +121,15 @@ Kernel TLS might not support all the features of OpenSSL. For instance,
 renegotiation, and setting the maximum fragment size is not possible as of
 Linux 4.20.
 
 renegotiation, and setting the maximum fragment size is not possible as of
 Linux 4.20.
 

+=item SSL_MODE_DTLS_SCTP_LABEL_LENGTH_BUG
+
+Older versions of OpenSSL had a bug in the computation of the label length
+used for computing the endpoint-pair shared secret. The bug was that the
+terminating zero was included in the length of the label. Setting this option
+enables this behaviour to allow interoperability with such broken
+implementations. Please note that setting this option breaks interoperability
+with correct implementations. This option only applies to DTLS over SCTP.
+

 =back
 
 All modes are off by default except for SSL_MODE_AUTO_RETRY which is on by
 =back
 
 All modes are off by default except for SSL_MODE_AUTO_RETRY which is on by


@@ -128,10 +137,10 @@ default since 1.1.1.
 
 =head1 RETURN VALUES
 
 
 =head1 RETURN VALUES
 

-SSL_CTX_set_mode() and SSL_set_mode() return the new mode bitmask
+SSL_CTX_set_mode() and SSL_set_mode() return the new mode bit-mask

 after adding B<mode>.
 
 after adding B<mode>.
 

-SSL_CTX_get_mode() and SSL_get_mode() return the current bitmask.
+SSL_CTX_get_mode() and SSL_get_mode() return the current bit-mask.

 
 =head1 SEE ALSO
 
 
 =head1 SEE ALSO
 


@@ -140,8 +149,8 @@ L<SSL_write(3)>, L<SSL_get_error(3)>
 
 =head1 HISTORY
 
 
 =head1 HISTORY
 

-SSL_MODE_ASYNC was first added to OpenSSL 1.1.0.
-SSL_MODE_NO_KTLS_TX was first added to OpenSSL 3.0.0.
+SSL_MODE_ASYNC was added in OpenSSL 1.1.0.
+SSL_MODE_NO_KTLS_TX was added in OpenSSL 3.0.

 
 =head1 COPYRIGHT
 
 
 =head1 COPYRIGHT