aboutsummaryrefslogtreecommitdiffstats
path: root/doc/manual/tls.rst
diff options
context:
space:
mode:
Diffstat (limited to 'doc/manual/tls.rst')
-rw-r--r--doc/manual/tls.rst13
1 files changed, 8 insertions, 5 deletions
diff --git a/doc/manual/tls.rst b/doc/manual/tls.rst
index 4ac7b5cb3..b581c978c 100644
--- a/doc/manual/tls.rst
+++ b/doc/manual/tls.rst
@@ -491,7 +491,10 @@ TLS Policies
----------------------------------------
``TLS::Policy`` is how an application can control details of what will
-be negotiated during a handshake.
+be negotiated during a handshake. The base class acts as the default
+policy. There is also a ``Strict_Policy`` (which forces only secure
+options, reducing compatability) and ``Text_Policy`` which reads
+policy settings from a file.
.. cpp:class:: TLS::Policy
@@ -617,7 +620,7 @@ be negotiated during a handshake.
server-initiated renegotiation attempt. Otherwise it will send
the server a non-fatal ``no_renegotiation`` alert.
- Default: true
+ Default: false
.. cpp:function:: bool allow_insecure_renegotiation() const
@@ -628,11 +631,11 @@ be negotiated during a handshake.
Default: false
- .. cpp:function:: DL_Group dh_group() const
+ .. cpp:function:: std::string dh_group() const
For ephemeral Diffie-Hellman key exchange, the server sends a
- group parameter. Return the group parameter a server should
- use.
+ group parameter. Return a string specifying the group parameter a
+ server should use.
Default: 2048 bit IETF IPsec group ("modp/ietf/2048")