openssl/doc/apps, branch OpenSSL_1_0_2b

Remove export static DH ciphersuites

2015-05-22T23:01:45Z

Remove support for the two export grade static DH ciphersuites. These two ciphersuites were newly added (along with a number of other static DH ciphersuites) to 1.0.2. However the two export ones have *never* worked since they were introduced. It seems strange in any case to be adding new export ciphersuites, and given "logjam" it also does not seem correct to fix them. Reviewed-by: Richard Levitte (cherry picked from commit 13f8eb4730b9fc039e743870f81e5ff54b3d05b8) Conflicts: CHANGES

dhparam: fix documentation

2015-05-20T12:54:51Z

The default bitlength is now 2048. Also clarify that either the number of bits or the generator must be present: $ openssl dhparam -2 and $ openssl dhparam 2048 generate parameters but $ openssl dhparam does not. Reviewed-by: Matt Caswell

Add documentation for the -no_alt_chains option for various apps, as well as

2015-04-20T12:42:17Z

the X509_V_FLAG_NO_ALT_CHAINS flag. Conflicts: doc/apps/cms.pod doc/apps/ocsp.pod doc/apps/s_client.pod doc/apps/s_server.pod doc/apps/smime.pod doc/apps/verify.pod Reviewed-by: Rich Salz

Configuration file examples.

2015-03-24T12:27:13Z

Reviewed-by: Matt Caswell (cherry picked from commit 7b68c30da01b4eedcd546f81844156646387cacb)

additional configuration documentation

2015-03-12T13:45:24Z

Reviewed-by: Andy Polyakov (cherry picked from commit 3d764db7a24e3dca1a3ee57202ce3c818d592141)

Remove export ciphers from the DEFAULT cipher list

2015-03-07T22:02:19Z

They are moved to the COMPLEMENTOFDEFAULT instead. This also fixes SSLv2 to be part of COMPLEMENTOFDEFAULT. Reviewed-by: Rich Salz

Document -no_explicit

2015-02-24T15:28:38Z

Reviewed-by: Rich Salz (cherry picked from commit 384dee51242e950c56b3bac32145957bfbf3cd4b)

Document openssl dgst -hmac option

2014-12-30T15:53:48Z

Signed-off-by: Kurt Roeckx Reviewed-by: Richard Levitte

Add documentation on -timeout option in the ocsp utility

2014-11-27T14:14:52Z

PR#3612 Reviewed-by: Dr. Stephen Henson (cherry picked from commit de87dd46c1283f899a9ecf4ccc72db74f36afbf2)

Allow ECDHE and DHE as forward-compatible aliases for EECDH and EDH

2014-11-10T09:58:49Z

see RT #3203 Future versions of OpenSSL use the canonical terms "ECDHE" and "DHE" as configuration strings and compilation constants. This patch introduces aliases so that the stable 1.0.2 branch can be forward-compatible with code and configuration scripts that use the normalized terms, while avoiding changing any library output for stable users. Signed-off-by: Kurt Roeckx Reviewed-by: Matt Caswell