]> git.ipfire.org Git - thirdparty/openssl.git/commitdiff
Document SSL_CIPHER environment variable
authorEugene Syromiatnikov <esyr@openssl.org>
Thu, 10 Jul 2025 17:05:33 +0000 (19:05 +0200)
committerNeil Horman <nhorman@openssl.org>
Tue, 29 Jul 2025 17:12:10 +0000 (13:12 -0400)
It is apparently checked/used by openssl s_time when -cipher option
is not set.

Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/28025)

doc/man1/openssl-s_time.pod.in
doc/man7/openssl-env.pod

index ca41f59362f942959a4baa0ca0ff58fe1086a3f8..507291814789b25ff8ee6e45315175178e0c6c78 100644 (file)
@@ -134,6 +134,18 @@ See L<openssl(1)/TLS Version Options>.
 
 =back
 
+=head1 ENVIRONMENT
+
+=over 4
+
+=item B<SSL_CIPHER>
+
+If the B<-cipher> option is not specified, the contents of this environment
+variable are used to modify the TLSv1.2 and below cipher list sent
+by the client the same way the aforementioned option does.
+
+=back
+
 =head1 NOTES
 
 This command can be used to measure the performance of an SSL connection.
index d0a7271cc5251eaeeaa58fc6fd8a9b536ae34f62..41b3884adb56a33138606f128d953240a5afadf8 100644 (file)
@@ -210,6 +210,12 @@ Use of this feature should be restricted to test and debug environments only.
 Specify the default directory or file containing CA certificates.
 See L<SSL_CTX_load_verify_locations(3)>.
 
+=item B<SSL_CIPHER>
+
+Used by L<openssl-s_time(1)> in case B<-cipher> option (that allows modifying
+TLSv1.2 and below cipher list sent by the client) is not provided,
+for specification of the aforementioned ciphers.
+
 =item B<TSGET>
 
 Additional arguments for the L<tsget(1)> command.