| SSL_export_keying_material.3 (340704) | SSL_export_keying_material.3 (344604) |
|---|---|
| 1.\" Automatically generated by Pod::Man 4.09 (Pod::Simple 3.35) | 1.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) |
| 2.\" 3.\" Standard preamble: 4.\" ======================================================================== 5.de Sp \" Vertical space (when we can't use .PP) 6.if t .sp .5v 7.if n .sp 8.. 9.de Vb \" Begin verbatim text --- 39 unchanged lines hidden (view full) --- 49.\" If the F register is >0, we'll generate index entries on stderr for 50.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index 51.\" entries marked with X<> in POD. Of course, you'll have to process the 52.\" output yourself in some meaningful fashion. 53.\" 54.\" Avoid warning from groff about undefined register 'F'. 55.de IX 56.. | 2.\" 3.\" Standard preamble: 4.\" ======================================================================== 5.de Sp \" Vertical space (when we can't use .PP) 6.if t .sp .5v 7.if n .sp 8.. 9.de Vb \" Begin verbatim text --- 39 unchanged lines hidden (view full) --- 49.\" If the F register is >0, we'll generate index entries on stderr for 50.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index 51.\" entries marked with X<> in POD. Of course, you'll have to process the 52.\" output yourself in some meaningful fashion. 53.\" 54.\" Avoid warning from groff about undefined register 'F'. 55.de IX 56.. |
| 57.if !\nF .nr F 0 58.if \nF>0 \{\ 59. de IX 60. tm Index:\\$1\t\\n%\t"\\$2" | 57.nr rF 0 58.if \n(.g .if rF .nr rF 1 59.if (\n(rF:(\n(.g==0)) \{\ 60. if \nF \{\ 61. de IX 62. tm Index:\\$1\t\\n%\t"\\$2" |
| 61.. | 63.. |
| 62. if !\nF==2 \{\ 63. nr % 0 64. nr F 2 | 64. if !\nF==2 \{\ 65. nr % 0 66. nr F 2 67. \} |
| 65. \} 66.\} | 68. \} 69.\} |
| 70.rr rF |
|
| 67.\" 68.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). 69.\" Fear. Run. Save yourself. No user-serviceable parts. 70. \" fudge factors for nroff and troff 71.if n \{\ 72. ds #H 0 73. ds #V .8m 74. ds #F .3m --- 49 unchanged lines hidden (view full) --- 124. ds Th \o'LP' 125. ds ae ae 126. ds Ae AE 127.\} 128.rm #[ #] #H #V #F C 129.\" ======================================================================== 130.\" 131.IX Title "SSL_export_keying_material 3" | 71.\" 72.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). 73.\" Fear. Run. Save yourself. No user-serviceable parts. 74. \" fudge factors for nroff and troff 75.if n \{\ 76. ds #H 0 77. ds #V .8m 78. ds #F .3m --- 49 unchanged lines hidden (view full) --- 128. ds Th \o'LP' 129. ds ae ae 130. ds Ae AE 131.\} 132.rm #[ #] #H #V #F C 133.\" ======================================================================== 134.\" 135.IX Title "SSL_export_keying_material 3" |
| 132.TH SSL_export_keying_material 3 "2018-11-20" "1.0.2q" "OpenSSL" | 136.TH SSL_export_keying_material 3 "2019-02-26" "1.0.2r" "OpenSSL" |
| 133.\" For nroff, turn off justification. Always turn off hyphenation; it makes 134.\" way too many mistakes in technical documents. 135.if n .ad l 136.nh 137.SH "NAME" 138SSL_export_keying_material \- obtain keying material for application use 139.SH "SYNOPSIS" 140.IX Header "SYNOPSIS" 141.Vb 1 142\& #include <openssl/ssl.h> 143\& 144\& int SSL_export_keying_material(SSL *s, unsigned char *out, size_t olen, 145\& const char *label, size_t llen, 146\& const unsigned char *context, 147\& size_t contextlen, int use_context); 148.Ve 149.SH "DESCRIPTION" 150.IX Header "DESCRIPTION" 151During the creation of a \s-1TLS\s0 or \s-1DTLS\s0 connection shared keying material is | 137.\" For nroff, turn off justification. Always turn off hyphenation; it makes 138.\" way too many mistakes in technical documents. 139.if n .ad l 140.nh 141.SH "NAME" 142SSL_export_keying_material \- obtain keying material for application use 143.SH "SYNOPSIS" 144.IX Header "SYNOPSIS" 145.Vb 1 146\& #include <openssl/ssl.h> 147\& 148\& int SSL_export_keying_material(SSL *s, unsigned char *out, size_t olen, 149\& const char *label, size_t llen, 150\& const unsigned char *context, 151\& size_t contextlen, int use_context); 152.Ve 153.SH "DESCRIPTION" 154.IX Header "DESCRIPTION" 155During the creation of a \s-1TLS\s0 or \s-1DTLS\s0 connection shared keying material is |
| 152established between the two endpoints. The function \fISSL_export_keying_material()\fR | 156established between the two endpoints. The function \fBSSL_export_keying_material()\fR |
| 153enables an application to use some of this keying material for its own purposes 154in accordance with \s-1RFC5705.\s0 155.PP 156An application may need to securely establish the context within which this 157keying material will be used. For example this may include identifiers for the 158application session, application algorithms or parameters, or the lifetime of 159the context. The context value is left to the application but must be the same 160on both sides of the communication. --- 13 unchanged lines hidden (view full) --- 174(<https://www.iana.org/assignments/tls\-parameters/tls\-parameters.xhtml#exporter\-labels>). 175Alternatively labels beginning with \*(L"\s-1EXPERIMENTAL\*(R"\s0 are permitted by the standard 176to be used without registration. 177.PP 178Note that this function is only defined for TLSv1.0 and above, and DTLSv1.0 and 179above. Attempting to use it in SSLv3 will result in an error. 180.SH "RETURN VALUES" 181.IX Header "RETURN VALUES" | 157enables an application to use some of this keying material for its own purposes 158in accordance with \s-1RFC5705.\s0 159.PP 160An application may need to securely establish the context within which this 161keying material will be used. For example this may include identifiers for the 162application session, application algorithms or parameters, or the lifetime of 163the context. The context value is left to the application but must be the same 164on both sides of the communication. --- 13 unchanged lines hidden (view full) --- 178(<https://www.iana.org/assignments/tls\-parameters/tls\-parameters.xhtml#exporter\-labels>). 179Alternatively labels beginning with \*(L"\s-1EXPERIMENTAL\*(R"\s0 are permitted by the standard 180to be used without registration. 181.PP 182Note that this function is only defined for TLSv1.0 and above, and DTLSv1.0 and 183above. Attempting to use it in SSLv3 will result in an error. 184.SH "RETURN VALUES" 185.IX Header "RETURN VALUES" |
| 182\&\fISSL_export_keying_material()\fR returns 0 or \-1 on failure or 1 on success. | 186\&\fBSSL_export_keying_material()\fR returns 0 or \-1 on failure or 1 on success. |
| 183.SH "COPYRIGHT" 184.IX Header "COPYRIGHT" 185Copyright 2017 The OpenSSL Project Authors. All Rights Reserved. 186.PP 187Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use 188this file except in compliance with the License. You can obtain a copy 189in the file \s-1LICENSE\s0 in the source distribution or at 190<https://www.openssl.org/source/license.html>. | 187.SH "COPYRIGHT" 188.IX Header "COPYRIGHT" 189Copyright 2017 The OpenSSL Project Authors. All Rights Reserved. 190.PP 191Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use 192this file except in compliance with the License. You can obtain a copy 193in the file \s-1LICENSE\s0 in the source distribution or at 194<https://www.openssl.org/source/license.html>. |