summaryrefslogtreecommitdiff
path: root/crypto/openssl/doc/ssl/SSL_CTX_set_mode.pod
diff options
context:
space:
mode:
authorXin LI <delphij@FreeBSD.org>2015-02-25 05:56:16 +0000
committerXin LI <delphij@FreeBSD.org>2015-02-25 05:56:16 +0000
commit0099f6f89a1325dc504096aecbdcbddad498310e (patch)
treefb8622e587884d6798b247e77bf0a8dcc352eedd /crypto/openssl/doc/ssl/SSL_CTX_set_mode.pod
parent11ad446ce58488a8870294bee24ea87050e96dbe (diff)
downloadsrc-test2-0099f6f89a1325dc504096aecbdcbddad498310e.tar.gz
src-test2-0099f6f89a1325dc504096aecbdcbddad498310e.zip
Fix integer overflow in IGMP protocol. [SA-15:04]releng/10.0
Fix vt(4) crash with improper ioctl parameters. [EN-15:01] Updated base system OpenSSL to 1.0.1l. [EN-15:02] Fix freebsd-update libraries update ordering issue. [EN-15:03] Approved by: so
Notes
Notes: svn path=/releng/10.0/; revision=279264
Diffstat (limited to 'crypto/openssl/doc/ssl/SSL_CTX_set_mode.pod')
-rw-r--r--crypto/openssl/doc/ssl/SSL_CTX_set_mode.pod10
1 files changed, 10 insertions, 0 deletions
diff --git a/crypto/openssl/doc/ssl/SSL_CTX_set_mode.pod b/crypto/openssl/doc/ssl/SSL_CTX_set_mode.pod
index 8cb669daeb78..2a5aaa555e13 100644
--- a/crypto/openssl/doc/ssl/SSL_CTX_set_mode.pod
+++ b/crypto/openssl/doc/ssl/SSL_CTX_set_mode.pod
@@ -71,6 +71,16 @@ SSL_CTX->freelist_max_len, which defaults to 32. Using this flag can
save around 34k per idle SSL connection.
This flag has no effect on SSL v2 connections, or on DTLS connections.
+=item SSL_MODE_SEND_FALLBACK_SCSV
+
+Send TLS_FALLBACK_SCSV in the ClientHello.
+To be set only by applications that reconnect with a downgraded protocol
+version; see draft-ietf-tls-downgrade-scsv-00 for details.
+
+DO NOT ENABLE THIS if your application attempts a normal handshake.
+Only use this in explicit fallback retries, following the guidance
+in draft-ietf-tls-downgrade-scsv-00.
+
=back
=head1 RETURN VALUES