*** empty log message ***

diff --git a/doc/tex/auth.tex b/doc/tex/auth.tex
index be22b748e13fe46fee136f26d9b2114be4156ca6..96019c50fe1e13dde5ba55a1844357bf6e2bb7ae 100644 (file)
--- a/doc/tex/auth.tex
+++ b/doc/tex/auth.tex
@@ -2,13 +2,14 @@
 \par
 The following authentication schemas are supported in \gnutls:
 \begin{enumerate}
- \item X.509 Public Key Infrastructure
- \item OpenPGP Public Key Infrastructure
+ \item Certificate Authentication
  \item Anonymous authentication
  \item SRP authentication
 \end{enumerate}
 
 \subsection{Authentication using X.509 certificates}
+This authentication method is part of the certificate authentication
+method in \gnutls{}.
 The X.509 protocols rely on a hierarchical trust model. In this trust model
 Certification Authorities (CAs) are used to certify entities.
 Usually more than one certification authorities exist, and certification
@@ -56,6 +57,8 @@ parameters which are send to the peer. Currently \gnutls does not support this c
 \end{figure}
 
 \subsection{Authentication using OpenPGP keys}
+This authentication method is part of the certificate authentication
+method in \gnutls{}.
 OpenPGP authentication relies on a distributed trust model, called the "web
 of trust". The "web of trust" uses a decentralized system of trusted
 introducers, which are the same as a CA. OpenPGP allows anyone to sign
@@ -69,7 +72,7 @@ available in OpenPGP authentication.
 
 
 \subsection{Anonymous authentication}
-The anonymous key exchanges perform encryption but there is no indication of the 
+The anonymous key exchange perform encryption but there is no indication of the 
 identity of the peer. This kind of authentication is vulnerable to man in the middle attack, 
 but this protocol can be used even if there is no prior communication or common trusted
 parties with the peer. Unless really required, do not use anonymous authentication.

diff --git a/doc/tex/ciphersuites.tex b/doc/tex/ciphersuites.tex
index 4e3485869df6ae887675a1eb8ddc99f144d830e3..9baf0f24889bbdfc3b725f75bea584762d31307e 100644 (file)
--- a/doc/tex/ciphersuites.tex
+++ b/doc/tex/ciphersuites.tex
@@ -1,9 +1,10 @@
 \newpage
 \section{TLS Cipher suites}
 \par 
-The Handshake Protocol of \tlsI{} negotiates ciphersuites 
-like the {\bf TLS\_DHE\_RSA\_WITH\_3DES\_CBC\_SHA}.
-These ciphersuites contain three parameters:
+The Handshake Protocol of \tlsI{} negotiates cipher suites 
+that of the form \\
+{\bf TLS\_DHE\_RSA\_WITH\_3DES\_CBC\_SHA}.
+The cipher suites contain three parameters:
 \begin{itemize}
 \item The key exchange algorithm (DHE\_RSA in the example)
 \item The Symmetric encryption algorithm and mode (3DES\_CBC in this

diff --git a/doc/tex/layers.tex b/doc/tex/layers.tex
index e5c6edd630d8e3d751c30112e9a3dd78ee7176cc..3f43b8829d67de74122d531bde6010502f9824bd 100644 (file)
--- a/doc/tex/layers.tex
+++ b/doc/tex/layers.tex
@@ -4,7 +4,8 @@
 \tlsI{} is a layered protocol, and consists of the Record Protocol,
 the Handshake Protocol and the Alert Protocol. The Record Protocol
 is to serve all other protocols and is above the transport layer.
-The Record protocol offers symmetric encryption, and data authenticity.
+The Record protocol offers symmetric encryption, data authenticity, and
+optionally compression.
 In \gnutls{} the record protocol is accessed using the 
 \hyperref{gnutls\_record\_recv()}{gnutls\_record\_recv() (see Section }{)}{gnutls_record_recv} and
 \hyperref{gnutls\_record\_send()}{gnutls\_record\_send() (see Section }{)}{gnutls_record_send}
@@ -13,16 +14,17 @@ functions.
 \par
 The Alert protocol offers some signaling to the other protocols. It can
 help informing the peer for the cause of failures and other error
-conditions.
-\hyperref{gnutls\_alert\_send()}{gnutls\_alert\_send() (see Section }{)}{gnutls_alert_send} and
-\hyperref{gnutls\_alert\_send\_appropriate()}{gnutls\_alert\_send\_appropriate() (see Section }{)}{gnutls_alert_send_appropriate} 
-functions.
+conditions. See
+\hyperref{gnutls\_alert\_send()}{gnutls\_alert\_send() (see Section }{)}{gnutls_alert_send},
+\hyperref{gnutls\_alert\_send\_appropriate()}{gnutls\_alert\_send\_appropriate() (see Section }{)}{gnutls_alert_send_appropriate}
+and
+\hyperref{gnutls\_alert\_get\_last()}{gnutls\_alert\_get\_last() (see Section }{)}{gnutls_alert_get_last}.
 
 \par 
-The Handshake protocol is responsible for the initial key exchange,
-and authentication. See \hyperref{figure}{figure }{}{fig:cert} for the
-protocol layering in TLS. The handshake protocol in \gnutls{} is accessed
-with the 
+The Handshake protocol is responsible for the security parameters'
+negotiation, the initial key exchange and
+authentication. See \hyperref{figure}{figure }{}{fig:cert} for the
+protocol layering in TLS. See the
 \hyperref{gnutls\_handshake()}{gnutls\_handshake() (see Section }{)}{gnutls_handshake} function.
 
 \begin{figure}[hbtp]