16c16,17
< =head1 HEADER FILES
---
> At first the library must be initialized; see
> L<SSL_library_init(3)|SSL_library_init(3)>.
18,19c19,22
< Currently the OpenSSL B<ssl> library provides the following C header files
< containing the prototypes for the data structures and and functions:
---
> Then an B<SSL_CTX> object is created as a framework to establish
> TLS/SSL enabled connections (see L<SSL_CTX_new(3)|SSL_CTX_new(3)>).
> Various options regarding certificates, algorithms etc. can be set
> in this object.
21c24,28
< =over 4
---
> When a network connection has been created, it can be assigned to an
> B<SSL> object. After the B<SSL> object has been created using
> L<SSL_new(3)|SSL_new(3)>, L<SSL_set_fd(3)|SSL_set_fd(3)> or
> L<SSL_set_bio(3)|SSL_set_bio(3)> can be used to associate the network
> connection with the object.
23c30,36
< =item B<ssl.h>
---
> Then the TLS/SSL handshake is performed using
> L<SSL_accept(3)|SSL_accept(3)> or L<SSL_connect(3)|SSL_connect(3)>
> respectively.
> L<SSL_read(3)|SSL_read(3)> and L<SSL_write(3)|SSL_write(3)> are used
> to read and write data on the TLS/SSL connection.
> L<SSL_shutdown(3)|SSL_shutdown(3)> can be used to shut down the
> TLS/SSL connection.
25,57d37
< That's the common header file for the SSL/TLS API. Include it into your
< program to make the API of the B<ssl> library available. It internally
< includes both more private SSL headers and headers from the B<crypto> library.
< Whenever you need hard-core details on the internals of the SSL API, look
< inside this header file.
<
< =item B<ssl2.h>
<
< That's the sub header file dealing with the SSLv2 protocol only.
< I<Usually you don't have to include it explicitly because
< it's already included by ssl.h>.
<
< =item B<ssl3.h>
<
< That's the sub header file dealing with the SSLv3 protocol only.
< I<Usually you don't have to include it explicitly because
< it's already included by ssl.h>.
<
< =item B<ssl23.h>
<
< That's the sub header file dealing with the combined use of the SSLv2 and
< SSLv3 protocols.
< I<Usually you don't have to include it explicitly because
< it's already included by ssl.h>.
<
< =item B<tls1.h>
<
< That's the sub header file dealing with the TLSv1 protocol only.
< I<Usually you don't have to include it explicitly because
< it's already included by ssl.h>.
<
< =back
<
97a78,120
>
> =head1 HEADER FILES
>
> Currently the OpenSSL B<ssl> library provides the following C header files
> containing the prototypes for the data structures and and functions:
>
> =over 4
>
> =item B<ssl.h>
>
> That's the common header file for the SSL/TLS API. Include it into your
> program to make the API of the B<ssl> library available. It internally
> includes both more private SSL headers and headers from the B<crypto> library.
> Whenever you need hard-core details on the internals of the SSL API, look
> inside this header file.
>
> =item B<ssl2.h>
>
> That's the sub header file dealing with the SSLv2 protocol only.
> I<Usually you don't have to include it explicitly because
> it's already included by ssl.h>.
>
> =item B<ssl3.h>
>
> That's the sub header file dealing with the SSLv3 protocol only.
> I<Usually you don't have to include it explicitly because
> it's already included by ssl.h>.
>
> =item B<ssl23.h>
>
> That's the sub header file dealing with the combined use of the SSLv2 and
> SSLv3 protocols.
> I<Usually you don't have to include it explicitly because
> it's already included by ssl.h>.
>
> =item B<tls1.h>
>
> That's the sub header file dealing with the TLSv1 protocol only.
> I<Usually you don't have to include it explicitly because
> it's already included by ssl.h>.
>
> =back
>
628c651,667
< L<SSL_connect(3)|SSL_connect(3)>, L<SSL_CTX_new(3)|SSL_CTX_new(3)>,
---
> L<SSL_connect(3)|SSL_connect(3)>,
> L<SSL_CIPHER_get_name(3)|SSL_CIPHER_get_name(3)>,
> L<SSL_CTX_add_extra_chain_cert(3)|SSL_CTX_add_extra_chain_cert(3)>,
> L<SSL_CTX_add_session(3)|SSL_CTX_add_session(3)>,
> L<SSL_CTX_flush_sessions(3)|SSL_CTX_flush_sessions(3)>,
> L<SSL_CTX_get_ex_new_index(3)|SSL_CTX_get_ex_new_index(3)>,
> L<SSL_CTX_get_verify_mode(3)|SSL_CTX_get_verify_mode(3)>,
> L<SSL_CTX_load_verify_locations(3)|SSL_CTX_load_verify_locations(3)>
> L<SSL_CTX_new(3)|SSL_CTX_new(3)>,
> L<SSL_CTX_sess_set_cache_size(3)|SSL_CTX_sess_set_cache_size(3)>,
> L<SSL_CTX_sess_set_get_cb(3)|SSL_CTX_sess_set_get_cb(3)>,
> L<SSL_CTX_sessions(3)|SSL_CTX_sessions(3)>,
> L<SSL_CTX_set_client_CA_list(3)|SSL_CTX_set_client_CA_list(3)>,
> L<SSL_CTX_set_default_passwd_cb(3)|SSL_CTX_set_default_passwd_cb(3)>,
> L<SSL_CTX_set_options(3)|SSL_CTX_set_options(3)>,
> L<SSL_CTX_set_session_cache_mode(3)|SSL_CTX_set_session_cache_mode(3)>,
> L<SSL_CTX_set_session_id_context(3)|SSL_CTX_set_session_id_context(3)>,
629a669,671
> L<SSL_CTX_set_timeout(3)|SSL_CTX_set_timeout(3)>,
> L<SSL_CTX_set_verify(3)|SSL_CTX_set_verify(3)>,
> L<SSL_CTX_use_certificate(3)|SSL_CTX_use_certificate(3)>,
631c673,677
< L<SSL_get_error(3)|SSL_get_error(3)>, L<SSL_get_fd(3)|SSL_get_fd(3)>,
---
> L<SSL_get_client_CA_list(3)|SSL_get_client_CA_list(3)>,
> L<SSL_get_error(3)|SSL_get_error(3)>,
> L<SSL_get_ex_data_X509_STORE_CTX_idx(3)|SSL_get_ex_data_X509_STORE_CTX_idx(3)>,
> L<SSL_get_ex_new_index(3)|SSL_get_ex_new_index(3)>,
> L<SSL_get_fd(3)|SSL_get_fd(3)>,
636c682,684
< L<SSL_library_init(3)|SSL_library_init(3)>, L<SSL_new(3)|SSL_new(3)>,
---
> L<SSL_library_init(3)|SSL_library_init(3)>,
> L<SSL_load_client_CA_file(3)|SSL_load_client_CA_file(3)>,
> L<SSL_new(3)|SSL_new(3)>,
641c689,692
< L<SSL_SESSION_free(3)|SSL_SESSION_free(3)>
---
> L<SSL_SESSION_free(3)|SSL_SESSION_free(3)>,
> L<SSL_SESSION_get_ex_new_index(3)|SSL_SESSION_get_ex_new_index(3)>,
> L<SSL_SESSION_get_time(3)|SSL_SESSION_get_time(3)>,
> L<d2i_SSL_SESSION(3)|d2i_SSL_SESSION(3)>