From 28984d18b3305c41b4121d93aa0ff41c90691737 Mon Sep 17 00:00:00 2001 From: Ingela Anderton Andin Date: Thu, 30 Sep 2010 11:39:50 +0200 Subject: Anonymous cipher suites For testing purposes ssl now also support some anonymous cipher suites when explicitly configured to do so. Also moved session cache tests to its own suite, so that timeout of end_per_testcase when the mnesia is used as session cache will not affect other test cases. --- lib/ssl/doc/src/ssl.xml | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) (limited to 'lib/ssl/doc') diff --git a/lib/ssl/doc/src/ssl.xml b/lib/ssl/doc/src/ssl.xml index 413703deca..511f1e0bb2 100644 --- a/lib/ssl/doc/src/ssl.xml +++ b/lib/ssl/doc/src/ssl.xml @@ -114,7 +114,7 @@

ciphersuite() = {key_exchange(), cipher(), hash()}

-

key_exchange() = rsa | dhe_dss | dhe_rsa +

key_exchange() = rsa | dhe_dss | dhe_rsa | dh_anon

cipher() = rc4_128 | des_cbc | '3des_ede_cbc' @@ -170,8 +170,13 @@ {ciphers, ciphers()} The cipher suites that should be supported. The function - ciphers_suites/0 can be used to find all available - ciphers. + cipher_suites/0 can be used to find all available + ciphers. Additionally some anonymous cipher suites ({dh_anon, + rc4_128, md5}, {dh_anon, des_cbc, sha}, {dh_anon, + '3des_ede_cbc', sha}, {dh_anon, aes_128_cbc, sha}, {dh_anon, + aes_256_cbc, sha}) are supported for testing purposes and will + only work if explicitly enabled by this option and they are supported/enabled + by the peer also. {ssl_imp, ssl_imp()} -- cgit v1.2.3