/openssl/doc/man3/ |
H A D | SSL_CTX_set1_curves.pod | 22 int SSL_get1_groups(SSL *ssl, int *groups); 46 groups in the array B<glist>. The array consist of all NIDs of supported groups. 56 =item For a TLS client, the groups are used directly in the supported groups 79 "P-521:P-384:P-256:X25519:ffdhe2048". The groups are used as in 91 supported groups for the SSL structure B<ssl>. 94 in the supported groups extension. It returns the total number of 95 supported groups. The B<groups> parameter can be B<NULL> to simply 96 return the number of groups for memory allocation purposes. The 102 SSL_get0_iana_groups() retrieves the list of groups sent by the 133 groups, and extended to include Diffie Hellman groups. The group functions [all …]
|
H A D | X509_ACERT_add_attr_nconf.pod | 37 values = SEQUENCE:groups 39 [groups]
|
H A D | SSL_CONF_cmd.pod | 150 =item B<-groups> I<groups> 152 This sets the supported groups. For clients, the groups are sent using 153 the supported groups extension. For servers, it is used to determine which 154 group to use. This setting affects groups used for signatures (in TLSv1.2 158 The B<groups> argument is a colon separated list of groups. The group can 171 =item B<-curves> I<groups> 173 This is a synonym for the B<-groups> command. 198 The B<groups> argument is a curve name or the special value B<auto> which 423 This sets the supported groups. For clients, the groups are 424 sent using the supported groups extension. For servers, it is used [all …]
|
H A D | DH_get0_pqg.pod | 63 optionally I<q> are associated with known safe prime groups. If it is a safe 102 length of the secret exponent (private key) in bits. For safe prime groups the optional length para…
|
H A D | DES_random_key.pod | 192 characters. It does not require any padding to 8 character groups. 211 characters. It does not require any padding to 8 character groups.
|
/openssl/doc/man7/ |
H A D | EVP_PKEY-DH.pod | 12 approved named safe-prime groups, and a class of "FIPS186-type" domain 15 approved safe-prime groups. 46 DH/DHX named groups can be easily validated since the parameters are well known. 165 to be set (note that this is implicitly set for named safe prime groups). 289 =item RFC 7919 (TLS ffdhe named safe prime groups) 291 =item RFC 3526 (IKE modp named safe prime groups) 293 =item RFC 5114 (Additional DH named groups for dh_1024_160", "dh_2048_224"
|
H A D | openssl-glossary.pod | 197 A provider in OpenSSL is a component that groups together algorithm
|
H A D | provider-base.pod | 555 TLS groups that a provider can support. Each group supported can be used for 558 TLS clients can advertise the list of TLS groups they support in the 561 groups that libssl already supports with additional ones.
|
/openssl/apps/demoSRP/ |
H A D | srp_verifier.txt | 2 # You can initialize the file with additional groups, these are
|
/openssl/test/recipes/30-test_evp_data/ |
H A D | evpmd_sha.txt | 175 # http://csrc.nist.gov/groups/ST/toolkit/examples.html#aHashing 177 # http://csrc.nist.gov/groups/STM/cavp/secure-hashing.html#test-vectors 285 # http://csrc.nist.gov/groups/STM/cavp/secure-hashing.html#test-vectors
|
/openssl/test/ssl-tests/ |
H A D | 20-cert-select.cnf.in | 115 #Deliberately set groups to not include the certificate group. This 838 # Excluding P-256 from the supported groups list should 840 # groups is not used in signature selection for TLS 1.3 854 # Excluding P-256 from the supported groups list should 856 # groups is not used in signature selection for TLS 1.3 902 name => "TLS 1.3 ECDSA with brainpool but no suitable groups",
|
H A D | 14-curves.cnf.in | 159 #server to fail because it has no shared groups for TLSv1.2
|
H A D | 20-cert-select.cnf | 57 test-52 = 52-TLS 1.3 ECDSA with brainpool but no suitable groups 1710 [52-TLS 1.3 ECDSA with brainpool but no suitable groups] 1711 ssl_conf = 52-TLS 1.3 ECDSA with brainpool but no suitable groups-ssl 1713 [52-TLS 1.3 ECDSA with brainpool but no suitable groups-ssl] 1714 server = 52-TLS 1.3 ECDSA with brainpool but no suitable groups-server 1715 client = 52-TLS 1.3 ECDSA with brainpool but no suitable groups-client 1717 [52-TLS 1.3 ECDSA with brainpool but no suitable groups-server] 1723 [52-TLS 1.3 ECDSA with brainpool but no suitable groups-client]
|
/openssl/apps/lib/ |
H A D | s_cb.c | 382 int i, ngroups, *groups, nid; in ssl_print_groups() local 387 groups = app_malloc(ngroups * sizeof(int), "groups to print"); in ssl_print_groups() 388 SSL_get1_groups(s, groups); in ssl_print_groups() 394 nid = groups[i]; in ssl_print_groups() 397 OPENSSL_free(groups); in ssl_print_groups()
|
/openssl/apps/ |
H A D | cmp.c | 2560 static char *conf_get_string(const CONF *src_conf, const char *groups, in conf_get_string() argument 2564 const char *end = groups + strlen(groups); in conf_get_string() 2566 while ((end = prev_item(groups, end)) != NULL) { in conf_get_string() 2574 static int conf_get_number_e(const CONF *conf_, const char *groups, in conf_get_number_e() argument 2577 char *str = conf_get_string(conf_, groups, name); in conf_get_number_e()
|
/openssl/ssl/ |
H A D | t1_lib.c | 993 int *groups, size_t ngroups) in tls1_set_groups() argument 1014 id = tls1_nid2group_id(groups[i]); in tls1_set_groups() 1192 const uint16_t *groups; in tls1_check_group_id() local 1216 tls1_get_supported_groups(s, &groups, &groups_len); in tls1_check_group_id() 1217 if (!tls1_in_list(group_id, groups, groups_len)) in tls1_check_group_id() 1229 tls1_get_peer_groups(s, &groups, &groups_len); in tls1_check_group_id() 1239 return tls1_in_list(group_id, groups, groups_len); in tls1_check_group_id()
|
/openssl/doc/man1/ |
H A D | openssl-ecparam.pod.in | 33 OpenSSL is currently not able to generate new groups and therefore
|
H A D | openssl-s_server.pod.in | 110 [B<-groups> I<val>] 674 The list of all supported groups includes named EC parameters as well as X25519 675 and X448 or FFDHE groups, and may also include groups implemented in 3rd-party
|
H A D | openssl-dgst.pod.in | 70 Print out the digest in two digit groups separated by colons, only relevant if
|
H A D | openssl-s_client.pod.in | 666 The list of all supported groups includes named EC parameters as well as X25519 667 and X448 or FFDHE groups, and may also include groups implemented in 3rd-party
|
/openssl/ssl/statem/ |
H A D | extensions_srvr.c | 1386 const uint16_t *groups; in tls_construct_stoc_supported_groups() local 1395 tls1_get_supported_groups(s, &groups, &numgroups); in tls_construct_stoc_supported_groups() 1404 uint16_t group = groups[i]; in tls_construct_stoc_supported_groups()
|
H A D | statem_lib.c | 2580 int check_in_list(SSL_CONNECTION *s, uint16_t group_id, const uint16_t *groups, in check_in_list() argument 2585 if (groups == NULL || num_groups == 0) in check_in_list() 2589 uint16_t group = groups[i]; in check_in_list()
|
H A D | statem_local.h | 68 int check_in_list(SSL_CONNECTION *s, uint16_t group_id, const uint16_t *groups,
|
/openssl/test/ |
H A D | README.md | 120 Run all tests in test groups 80 to 99 except for tests in group 90:
|
/openssl/doc/internal/man3/ |
H A D | OPTIONS.pod | 303 There are a few groups of options that are common to many OpenSSL programs.
|