openssl/doc
Viktor Dukhovni 9f6b22b814 Enabled DANE only when at least one TLSA RR was added
It is up to the caller of SSL_dane_tlsa_add() to take appropriate
action when no records are added successfully or adding some records
triggers an internal error (negative return value).

With this change the caller can continue with PKIX if desired when
none of the TLSA records are usable, or take some appropriate action
if DANE is required.

Also fixed the internal ssl_dane_dup() function to properly initialize
the TLSA RR stack in the target SSL handle.  Errors in ssl_dane_dup()
are no longer ignored.

Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-04-22 10:41:57 -04:00
..
apps Suppress CT callback as appropriate 2016-04-07 14:41:34 -04:00
crypto Fix warnings installing pod files 2016-04-20 13:27:24 +01:00
HOWTO Fixed a bunch of typos in the docs 2016-03-19 20:23:22 -04:00
ssl Enabled DANE only when at least one TLSA RR was added 2016-04-22 10:41:57 -04:00
dir-locals.example.el Adjust the general fill-column in doc/dir-locals.example.el 2015-09-08 00:59:50 +02:00
fingerprints.txt RT3802: Fixes typos in doc/crypto/ 2015-05-03 08:51:23 -04:00
openssl-c-indent.el Correct another batch of typos 2016-03-22 21:57:26 -04:00
README Remove more unused things. 2016-03-18 09:40:25 -04:00

README  This file

fingerprints.txt
        PGP fingerprints of authoried release signers

standards.txt
        Moved to the web, https://www.openssl.org/docs/standards.html

HOWTO/
        A few how-to documents; not necessarily up-to-date
apps/
        The openssl command-line tools; start with openssl.pod
ssl/
        The SSL library; start with ssl.pod
crypto/
        The cryptographic library; start with crypto.pod

Formatted versions of the manpages (apps,ssl,crypto) can be found at
        https://www.openssl.org/docs/manpages.html