mirror/curl
2
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2025-02-05 14:30:10 +08:00
Code Issues Packages Projects Releases Wiki Activity

docs: wolfssl and mbedtls add CURLOPT_TLS13_CIPHERS support

Browse Source 
Documentation for #14384 and #14385

Closes #14386
This commit is contained in:
Jan Venekamp 2024-08-04 20:30:37 +02:00 committed by Daniel Stenberg
parent 4c12892411
commit f3e07e5c55
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2
3 changed files with 33 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
docs/CIPHERS.md
View File

@ -12,13 +12,14 @@ and
[`--ciphers`](https://curl.se/docs/manpage.html#--ciphers)
users can control which ciphers to consider when negotiating TLS connections.
TLS 1.3 ciphers are supported since curl 7.61 for OpenSSL 1.1.1+, and since
curl 7.85 for Schannel with options
TLS 1.3 ciphers are supported since curl 7.61 for OpenSSL 1.1.1+, since curl
7.85 for Schannel, since curl 8.10.0 for wolfSSL and since curl 8.10.0 for
mbedTLS 3.6.0+ with options
[`CURLOPT_TLS13_CIPHERS`](https://curl.se/libcurl/c/CURLOPT_TLS13_CIPHERS.html)
and
[`--tls13-ciphers`](https://curl.se/docs/manpage.html#--tls13-ciphers)
. If you are using a different SSL backend you can try setting TLS 1.3 cipher
suites by using the respective regular cipher option.
. Before curl 8.10.0 with mbedTLS or wolfSSL, TLS 1.3 cipher suites where set
by using the respective regular cipher option.
The names of the known ciphers differ depending on which TLS backend that
libcurl was built to use. This is an attempt to list known cipher names.

20
docs/libcurl/opts/CURLOPT_PROXY_TLS13_CIPHERS.md
View File

@ -15,6 +15,8 @@ Protocol:
TLS-backend:
- OpenSSL
- Schannel
- wolfSSL
- mbedTLS
Added-in: 7.61.0
---
@ -42,9 +44,11 @@ Find more details about cipher lists on this URL:
https://curl.se/docs/ssl-ciphers.html
This option is currently used only when curl is built to use OpenSSL 1.1.1 or
later. If you are using a different SSL backend you can try setting TLS 1.3
cipher suites by using the CURLOPT_PROXY_SSL_CIPHER_LIST(3) option.
This option is used when curl is built to use OpenSSL 1.1.1 or later,
Schannel, wolfSSL, or mbedTLS 3.6.0 or later.
Before curl 8.10.0 with mbedTLS or wolfSSL, TLS 1.3 cipher suites where set
by using the CURLOPT_PROXY_SSL_CIPHER_LIST(3) option.
The application does not have to keep the string around after setting this
option.
@ -72,6 +76,16 @@ int main(void)
}
~~~
# HISTORY
Added in 7.61.0 for OpenSSL. Available when built with OpenSSL \>= 1.1.1.
Added in 7.85.0 for Schannel.
Added in 8.10.0 for wolfSSL.
Added in 8.10.0 for mbedTLS. Available when built with mbedTLS \>= 3.6.0.
# %AVAILABILITY%
# RETURN VALUE

15
docs/libcurl/opts/CURLOPT_TLS13_CIPHERS.md
View File

@ -16,6 +16,8 @@ Protocol:
TLS-backend:
- OpenSSL
- Schannel
- wolfSSL
- mbedTLS
Added-in: 7.61.0
---
@ -42,10 +44,11 @@ Find more details about cipher lists on this URL:
https://curl.se/docs/ssl-ciphers.html
This option is currently used only when curl is built to use OpenSSL 1.1.1 or
later, or Schannel. If you are using a different SSL backend you can try
setting TLS 1.3 cipher suites by using the CURLOPT_SSL_CIPHER_LIST(3)
option.
This option is used when curl is built to use OpenSSL 1.1.1 or later,
Schannel, wolfSSL, or mbedTLS 3.6.0 or later.
Before curl 8.10.0 with mbedTLS or wolfSSL, TLS 1.3 cipher suites where set
by using the CURLOPT_SSL_CIPHER_LIST(3) option.
The application does not have to keep the string around after setting this
option.
@ -79,6 +82,10 @@ Added in 7.61.0 for OpenSSL. Available when built with OpenSSL \>= 1.1.1.
Added in 7.85.0 for Schannel.
Added in 8.10.0 for wolfSSL.
Added in 8.10.0 for mbedTLS. Available when built with mbedTLS \>= 3.6.0.
# %AVAILABILITY%
# RETURN VALUE