From 932e4432596447eb9331cc2a2bb74a26a35b4efc Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Mon, 17 Jun 2024 12:52:03 +0200 Subject: Merging upstream version 4.23.0. Signed-off-by: Daniel Baumann --- upstream/debian-unstable/man7/bio.7ssl | 29 ++++++++++++++++++++++++++--- 1 file changed, 26 insertions(+), 3 deletions(-) (limited to 'upstream/debian-unstable/man7/bio.7ssl') diff --git a/upstream/debian-unstable/man7/bio.7ssl b/upstream/debian-unstable/man7/bio.7ssl index 9d974ab6..0ad46d91 100644 --- a/upstream/debian-unstable/man7/bio.7ssl +++ b/upstream/debian-unstable/man7/bio.7ssl @@ -55,7 +55,7 @@ .\" ======================================================================== .\" .IX Title "BIO 7SSL" -.TH BIO 7SSL 2024-02-03 3.1.5 OpenSSL +.TH BIO 7SSL 2024-04-04 3.2.2-dev OpenSSL .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -107,6 +107,24 @@ Normally the \fItype\fR argument is supplied by a function which returns a pointer to a BIO_METHOD. There is a naming convention for such functions: a source/sink BIO typically starts with \fIBIO_s_\fR and a filter BIO with \fIBIO_f_\fR. +.SS "TCP Fast Open" +.IX Subsection "TCP Fast Open" +TCP Fast Open (RFC7413), abbreviated "TFO", is supported by the BIO +interface since OpenSSL 3.2. TFO is supported in the following operating systems: +.IP \(bu 4 +Linux kernel 3.13 and later, where TFO is enabled by default. +.IP \(bu 4 +Linux kernel 4.11 and later, using TCP_FASTOPEN_CONNECT. +.IP \(bu 4 +FreeBSD 10.3 to 11.4, supports server TFO only. +.IP \(bu 4 +FreeBSD 12.0 and later, supports both client and server TFO. +.IP \(bu 4 +macOS 10.14 and later. +.PP +Each operating system has a slightly different API for TFO. Please +refer to the operating systems' API documentation when using +sockets directly. .SH EXAMPLES .IX Header "EXAMPLES" Create a memory BIO: @@ -121,7 +139,9 @@ Create a memory BIO: \&\fBBIO_f_cipher\fR\|(3), \fBBIO_f_md\fR\|(3), \&\fBBIO_f_null\fR\|(3), \fBBIO_f_ssl\fR\|(3), \&\fBBIO_f_readbuffer\fR\|(3), -\&\fBBIO_find_type\fR\|(3), \fBBIO_new\fR\|(3), +\&\fBBIO_find_type\fR\|(3), +\&\fBBIO_get_conn_mode\fR\|(3), +\&\fBBIO_new\fR\|(3), \&\fBBIO_new_bio_pair\fR\|(3), \&\fBBIO_push\fR\|(3), \fBBIO_read_ex\fR\|(3), \&\fBBIO_s_accept\fR\|(3), \fBBIO_s_bio\fR\|(3), @@ -129,10 +149,13 @@ Create a memory BIO: \&\fBBIO_s_file\fR\|(3), \fBBIO_s_mem\fR\|(3), \&\fBBIO_s_null\fR\|(3), \fBBIO_s_socket\fR\|(3), \&\fBBIO_set_callback\fR\|(3), +\&\fBBIO_set_conn_mode\fR\|(3), +\&\fBBIO_set_tfo\fR\|(3), +\&\fBBIO_set_tfo_accept\fR\|(3), \&\fBBIO_should_retry\fR\|(3) .SH COPYRIGHT .IX Header "COPYRIGHT" -Copyright 2000\-2021 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2022 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy -- cgit v1.2.3