openssl/doc, branch OpenSSL_1_0_2

Only allow ephemeral RSA keys in export ciphersuites.

2015-01-06T12:45:10Z

OpenSSL clients would tolerate temporary RSA keys in non-export ciphersuites. It also had an option SSL_OP_EPHEMERAL_RSA which enabled this server side. Remove both options as they are a protocol violation. Thanks to Karthikeyan Bhargavan for reporting this issue. (CVE-2015-0204) Reviewed-by: Matt Caswell Reviewed-by: Tim Hudson

Remove MS SGC

2015-01-02T23:01:38Z

MS Server gated cryptography is obsolete and dates from the time of export restrictions on strong encryption and is only used by ancient versions of MSIE. Reviewed-by: Matt Caswell (cherry picked from commit 63eab8a620944a990ab3985620966ccd9f48d681)

Document openssl dgst -hmac option

2014-12-30T15:53:48Z

Signed-off-by: Kurt Roeckx Reviewed-by: Richard Levitte

Improves certificates HOWTO

2014-12-22T15:26:03Z

* adds links to various related documents. * fixes a few typos. * rewords a few sentences. Reviewed-by: Richard Levitte Reviewed-by: Rich Salz (cherry picked from commit 67472bd82bed9d5e481b0d75926aab93618902be)

Small typo

2014-12-22T14:36:42Z

Reviewed-by: Stephen Henson (cherry picked from commit 7cfab40f43afac2f46652886e260d1c4de058806)

Clarify the return values for SSL_get_shared_curve.

2014-12-05T17:31:57Z

Reviewed-by: Matt Caswell (cherry picked from commit 376e2ca3e3525290619602dc6013c97c9653c037)

Correct some layout issues, convert all remaining tabs to appropriate amounts of spaces.

2014-11-28T16:04:15Z

Reviewed-by: Matt Caswell (cherry picked from commit 8123d158ab6f0a6a468748c133e33c2063ff36b5)

Improves the proxy certificates howto doc.

2014-11-28T16:04:15Z

The current documentation contains a bunch of spelling and grammar mistakes. I also found it hard to understand some paragraphs, so here is my attempt to improve its readability. Reviewed-by: Richard Levitte Reviewed-by: Matt Caswell (cherry picked from commit 03b637a730e4a298c360cc143de7564060c06324)

Add documentation on -timeout option in the ocsp utility

2014-11-27T14:14:52Z

PR#3612 Reviewed-by: Dr. Stephen Henson (cherry picked from commit de87dd46c1283f899a9ecf4ccc72db74f36afbf2)

Updates to X509_NAME_get_index_by_NID.pod submitted by user Bernardh via the wiki

2014-11-27T13:57:11Z

Minor changes made by Matt Caswell Reviewed-by: Dr. Stephen Henson (cherry picked from commit 648495864513da788246f9b75dbbbce0614ed5e8)