mirror of https://github.com/openssl/openssl.git synced 2024-12-27 06:21:43 +08:00

History

Neil Horman 21f7a09ca2 Convert jdkTrustedKeyUsage to be a pkcs12 cmd line option Creating JDK compatible pkcs12 files requires a bit more than just adding the Trusted Key Usage OID to a certbag in the pkcs12 file. Additionally the JDK currently requires that pkcs12 files setting this oid _not_ contain any additional keys, and in response will produce unpredictable results. This could be solved by implying --nokeys when the pkcs12 utility is run and the config option is set, but thatcould confuse users who didn't specify nokeys on the command line. As such, remove the config file setting for this feature, and replace it with a -jdktrust command line option, that is documented to assert nokeys when a users specifies the new command line option. Fixes #22215 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22422)		2023-10-20 16:30:43 +01:00
..
designs	[design] Make it possible to use explicitly fetched signature implementation	2023-10-05 09:11:24 +02:00
HOWTO
images
internal	rand: add callbacks to cleanup the user entropy resp. nonce	2023-10-20 09:48:34 +01:00
life-cycles
man1	Convert jdkTrustedKeyUsage to be a pkcs12 cmd line option	2023-10-20 16:30:43 +01:00
man3	QUIC: Add handling of SSL_get_shutdown()	2023-10-20 16:29:28 +01:00
man5	Fix typos found by codespell	2023-09-13 08:13:08 +02:00
man7	rand: add callbacks to cleanup the user entropy resp. nonce	2023-10-20 09:48:34 +01:00
build.info	Add a new guide page on writing a non-blocking QUIC client	2023-09-08 15:44:37 +01:00
build.info.in
dir-locals.example.el
fingerprints.txt
openssl-c-indent.el
perlvars.pm
README.md

README.md

OpenSSL Documentation

README.md This file

fingerprints.txt PGP fingerprints of authorised release signers

standards.txt standards.txt Moved to the web, https://www.openssl.org/docs/standards.html

HOWTO/ A few how-to documents; not necessarily up-to-date

man1/ The openssl command-line tools; start with openssl.pod

man3/ The SSL library and the crypto library

man5/ File formats

man7/ Overviews; start with crypto.pod and ssl.pod, for example Algorithm specific EVP_PKEY documentation.

Formatted versions of the manpages (apps,ssl,crypto) can be found at https://www.openssl.org/docs/manpages.html