diff options
Diffstat (limited to 'doc/man3/SSL_key_update.pod')
| -rw-r--r-- | doc/man3/SSL_key_update.pod | 13 |
1 files changed, 7 insertions, 6 deletions
diff --git a/doc/man3/SSL_key_update.pod b/doc/man3/SSL_key_update.pod index 068ace597836..6d5b42e0b166 100644 --- a/doc/man3/SSL_key_update.pod +++ b/doc/man3/SSL_key_update.pod @@ -32,10 +32,11 @@ peer to additionally update its sending keys. It is an error if B<updatetype> is set to B<SSL_KEY_UPDATE_NONE>. SSL_key_update() must only be called after the initial handshake has been -completed and TLSv1.3 has been negotiated. The key update will not take place -until the next time an IO operation such as SSL_read_ex() or SSL_write_ex() -takes place on the connection. Alternatively SSL_do_handshake() can be called to -force the update to take place immediately. +completed and TLSv1.3 has been negotiated, at the same time, the application +needs to ensure that the writing of data has been completed. The key update +will not take place until the next time an IO operation such as SSL_read_ex() +or SSL_write_ex() takes place on the connection. Alternatively SSL_do_handshake() +can be called to force the update to take place immediately. SSL_get_key_update_type() can be used to determine whether a key update operation has been scheduled but not yet performed. The type of the pending key @@ -100,9 +101,9 @@ OpenSSL 1.1.1. =head1 COPYRIGHT -Copyright 2017-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017-2021 The OpenSSL Project Authors. All Rights Reserved. -Licensed under the OpenSSL license (the "License"). You may not use +Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at L<https://www.openssl.org/source/license.html>. |