From: schwarze Date: Mon, 10 Apr 2017 14:00:51 +0000 (+0000) Subject: for pure *_ctrl() wrapper macros, move the reference from ssl(3) X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=bb2ba699f568a3555bd20778ee71f3a9045bc4fe;p=openbsd for pure *_ctrl() wrapper macros, move the reference from ssl(3) to SSL_CTX_ctrl(3) to make ssl(3) slightly more palatable --- diff --git a/lib/libssl/man/SSL_CTX_add_extra_chain_cert.3 b/lib/libssl/man/SSL_CTX_add_extra_chain_cert.3 index c279c1dce23..b81382f3f6e 100644 --- a/lib/libssl/man/SSL_CTX_add_extra_chain_cert.3 +++ b/lib/libssl/man/SSL_CTX_add_extra_chain_cert.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: SSL_CTX_add_extra_chain_cert.3,v 1.2 2016/11/30 12:55:25 schwarze Exp $ +.\" $OpenBSD: SSL_CTX_add_extra_chain_cert.3,v 1.3 2017/04/10 14:00:51 schwarze Exp $ .\" OpenSSL f0d6ee6be Feb 15 07:41:42 2002 +0000 .\" .\" This file was written by Lutz Jaenicke and @@ -50,7 +50,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: November 30 2016 $ +.Dd $Mdocdate: April 10 2017 $ .Dt SSL_CTX_ADD_EXTRA_CHAIN_CERT 3 .Os .Sh NAME @@ -99,7 +99,7 @@ and return 1 on success or 0 for failure. Check out the error stack to find out the reason for failure. .Sh SEE ALSO -.Xr ssl 3 , +.Xr SSL_CTX_ctrl 3 , .Xr SSL_CTX_load_verify_locations 3 , .Xr SSL_CTX_set_client_cert_cb 3 , .Xr SSL_CTX_use_certificate 3 diff --git a/lib/libssl/man/SSL_CTX_ctrl.3 b/lib/libssl/man/SSL_CTX_ctrl.3 index 5ee447afcfa..88b907d09b8 100644 --- a/lib/libssl/man/SSL_CTX_ctrl.3 +++ b/lib/libssl/man/SSL_CTX_ctrl.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: SSL_CTX_ctrl.3,v 1.2 2016/11/30 13:21:23 schwarze Exp $ +.\" $OpenBSD: SSL_CTX_ctrl.3,v 1.3 2017/04/10 14:00:51 schwarze Exp $ .\" OpenSSL b97fdb57 Nov 11 09:33:09 2016 +0100 .\" .\" This file was written by Lutz Jaenicke . @@ -48,7 +48,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: November 30 2016 $ +.Dd $Mdocdate: April 10 2017 $ .Dt SSL_CTX_CTRL 3 .Os .Sh NAME @@ -93,4 +93,17 @@ functions depend on the command supplied via the .Fn cmd parameter. .Sh SEE ALSO -.Xr ssl 3 +.Xr ssl 3 , +.Xr SSL_CTX_add_extra_chain_cert 3 , +.Xr SSL_CTX_sess_number 3 , +.Xr SSL_CTX_sess_set_cache_size 3 , +.Xr SSL_CTX_set_max_cert_list 3 , +.Xr SSL_CTX_set_mode 3 , +.Xr SSL_CTX_set_options 3 , +.Xr SSL_CTX_set_session_cache_mode 3 , +.Xr SSL_CTX_set_tlsext_servername_callback 3 , +.Xr SSL_CTX_set_tlsext_status_cb 3 , +.Xr SSL_CTX_set_tlsext_ticket_key_cb 3 , +.Xr SSL_num_renegotiations 3 , +.Xr SSL_session_reused 3 , +.Xr SSL_set_max_send_fragment 3 diff --git a/lib/libssl/man/SSL_CTX_sess_number.3 b/lib/libssl/man/SSL_CTX_sess_number.3 index 73c4a2b9d24..c40cdbc67e2 100644 --- a/lib/libssl/man/SSL_CTX_sess_number.3 +++ b/lib/libssl/man/SSL_CTX_sess_number.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: SSL_CTX_sess_number.3,v 1.3 2017/04/10 01:26:54 schwarze Exp $ +.\" $OpenBSD: SSL_CTX_sess_number.3,v 1.4 2017/04/10 14:00:51 schwarze Exp $ .\" OpenSSL SSL_CTX_sess_number.pod 7bd27895 Mar 29 11:45:29 2017 +1000 .\" .\" This file was written by Lutz Jaenicke . @@ -141,7 +141,7 @@ count. returns the number of sessions that were removed because the maximum session cache size was exceeded. .Sh SEE ALSO -.Xr ssl 3 , +.Xr SSL_CTX_ctrl 3 , .Xr SSL_CTX_sess_set_cache_size 3 , .Xr SSL_CTX_set_session_cache_mode 3 , .Xr SSL_set_session 3 diff --git a/lib/libssl/man/SSL_CTX_sess_set_cache_size.3 b/lib/libssl/man/SSL_CTX_sess_set_cache_size.3 index 17ea0a75ebb..0533a5472a7 100644 --- a/lib/libssl/man/SSL_CTX_sess_set_cache_size.3 +++ b/lib/libssl/man/SSL_CTX_sess_set_cache_size.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: SSL_CTX_sess_set_cache_size.3,v 1.2 2016/11/30 16:24:56 schwarze Exp $ +.\" $OpenBSD: SSL_CTX_sess_set_cache_size.3,v 1.3 2017/04/10 14:00:51 schwarze Exp $ .\" OpenSSL b97fdb57 Nov 11 09:33:09 2016 +0100 .\" .\" This file was written by Lutz Jaenicke . @@ -48,7 +48,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: November 30 2016 $ +.Dd $Mdocdate: April 10 2017 $ .Dt SSL_CTX_SESS_SET_CACHE_SIZE 3 .Os .Sh NAME @@ -96,7 +96,7 @@ returns the previously valid size. .Fn SSL_CTX_sess_get_cache_size returns the currently valid size. .Sh SEE ALSO -.Xr ssl 3 , +.Xr SSL_CTX_ctrl 3 , .Xr SSL_CTX_flush_sessions 3 , .Xr SSL_CTX_sess_number 3 , .Xr SSL_CTX_set_session_cache_mode 3 diff --git a/lib/libssl/man/SSL_CTX_set_max_cert_list.3 b/lib/libssl/man/SSL_CTX_set_max_cert_list.3 index 92043322d85..51805c6bdc5 100644 --- a/lib/libssl/man/SSL_CTX_set_max_cert_list.3 +++ b/lib/libssl/man/SSL_CTX_set_max_cert_list.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: SSL_CTX_set_max_cert_list.3,v 1.2 2016/12/01 15:26:11 schwarze Exp $ +.\" $OpenBSD: SSL_CTX_set_max_cert_list.3,v 1.3 2017/04/10 14:00:51 schwarze Exp $ .\" OpenSSL b97fdb57 Nov 11 09:33:09 2016 +0100 .\" .\" This file was written by Lutz Jaenicke . @@ -48,7 +48,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: December 1 2016 $ +.Dd $Mdocdate: April 10 2017 $ .Dt SSL_CTX_SET_MAX_CERT_LIST 3 .Os .Sh NAME @@ -144,7 +144,7 @@ and .Fn SSL_get_max_cert_list return the currently set value. .Sh SEE ALSO -.Xr ssl 3 , +.Xr SSL_CTX_ctrl 3 , .Xr SSL_CTX_set_verify 3 , .Xr SSL_new 3 .Sh HISTORY diff --git a/lib/libssl/man/SSL_CTX_set_mode.3 b/lib/libssl/man/SSL_CTX_set_mode.3 index 04fd6f2b755..25a11175383 100644 --- a/lib/libssl/man/SSL_CTX_set_mode.3 +++ b/lib/libssl/man/SSL_CTX_set_mode.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: SSL_CTX_set_mode.3,v 1.2 2016/12/01 15:30:23 schwarze Exp $ +.\" $OpenBSD: SSL_CTX_set_mode.3,v 1.3 2017/04/10 14:00:51 schwarze Exp $ .\" OpenSSL 8671b898 Jun 3 02:48:34 2008 +0000 .\" .\" This file was written by Lutz Jaenicke and @@ -49,7 +49,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: December 1 2016 $ +.Dd $Mdocdate: April 10 2017 $ .Dt SSL_CTX_SET_MODE 3 .Os .Sh NAME @@ -161,7 +161,7 @@ and .Fn SSL_get_mode return the current bitmask. .Sh SEE ALSO -.Xr ssl 3 , +.Xr SSL_CTX_ctrl 3 , .Xr SSL_read 3 , .Xr SSL_write 3 .Sh HISTORY diff --git a/lib/libssl/man/SSL_CTX_set_options.3 b/lib/libssl/man/SSL_CTX_set_options.3 index a066229402e..b77f1176a19 100644 --- a/lib/libssl/man/SSL_CTX_set_options.3 +++ b/lib/libssl/man/SSL_CTX_set_options.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: SSL_CTX_set_options.3,v 1.2 2016/12/01 15:40:14 schwarze Exp $ +.\" $OpenBSD: SSL_CTX_set_options.3,v 1.3 2017/04/10 14:00:51 schwarze Exp $ .\" OpenSSL 361a1191 Dec 6 17:56:41 2015 +0100 .\" .\" This file was written by Lutz Jaenicke , @@ -51,7 +51,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: December 1 2016 $ +.Dd $Mdocdate: April 10 2017 $ .Dt SSL_CTX_SET_OPTIONS 3 .Os .Sh NAME @@ -332,8 +332,8 @@ return the current bitmask. returns 1 is the peer supports secure renegotiation and 0 if it does not. .Sh SEE ALSO .Xr openssl 1 , -.Xr ssl 3 , .Xr SSL_clear 3 , +.Xr SSL_CTX_ctrl 3 , .Xr SSL_new 3 .Sh HISTORY .Fn SSL_CTX_clear_options diff --git a/lib/libssl/man/SSL_CTX_set_session_cache_mode.3 b/lib/libssl/man/SSL_CTX_set_session_cache_mode.3 index f431ceeb44a..4a69b84cadd 100644 --- a/lib/libssl/man/SSL_CTX_set_session_cache_mode.3 +++ b/lib/libssl/man/SSL_CTX_set_session_cache_mode.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: SSL_CTX_set_session_cache_mode.3,v 1.3 2016/12/29 14:03:55 schwarze Exp $ +.\" $OpenBSD: SSL_CTX_set_session_cache_mode.3,v 1.4 2017/04/10 14:00:51 schwarze Exp $ .\" OpenSSL 67adf0a7 Dec 25 19:58:38 2016 +0100 .\" .\" This file was written by Lutz Jaenicke and @@ -49,7 +49,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: December 29 2016 $ +.Dd $Mdocdate: April 10 2017 $ .Dt SSL_CTX_SET_SESSION_CACHE_MODE 3 .Os .Sh NAME @@ -174,8 +174,8 @@ returns the previously set cache mode. .Fn SSL_CTX_get_session_cache_mode returns the currently set cache mode. .Sh SEE ALSO -.Xr ssl 3 , .Xr SSL_CTX_add_session 3 , +.Xr SSL_CTX_ctrl 3 , .Xr SSL_CTX_flush_sessions 3 , .Xr SSL_CTX_sess_number 3 , .Xr SSL_CTX_sess_set_cache_size 3 , diff --git a/lib/libssl/man/SSL_CTX_set_tlsext_status_cb.3 b/lib/libssl/man/SSL_CTX_set_tlsext_status_cb.3 index 7fdd816cc3c..b195e16809f 100644 --- a/lib/libssl/man/SSL_CTX_set_tlsext_status_cb.3 +++ b/lib/libssl/man/SSL_CTX_set_tlsext_status_cb.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: SSL_CTX_set_tlsext_status_cb.3,v 1.1 2016/12/01 21:12:49 schwarze Exp $ +.\" $OpenBSD: SSL_CTX_set_tlsext_status_cb.3,v 1.2 2017/04/10 14:00:51 schwarze Exp $ .\" OpenSSL 43c34894 Nov 30 16:04:51 2015 +0000 .\" .\" This file was written by Matt Caswell . @@ -48,7 +48,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: December 1 2016 $ +.Dd $Mdocdate: April 10 2017 $ .Dt SSL_CTX_SET_TLSEXT_STATUS_CB 3 .Os .Sh NAME @@ -164,3 +164,5 @@ return 0 on error or 1 on success. .Fn SSL_get_tlsext_status_ocsp_resp returns the length of the OCSP response data or -1 if there is no OCSP response data. +.Sh SEE ALSO +.Xr SSL_CTX_callback_ctrl 3 diff --git a/lib/libssl/man/SSL_CTX_set_tlsext_ticket_key_cb.3 b/lib/libssl/man/SSL_CTX_set_tlsext_ticket_key_cb.3 index 1aee2d65dd6..04f4c6872fb 100644 --- a/lib/libssl/man/SSL_CTX_set_tlsext_ticket_key_cb.3 +++ b/lib/libssl/man/SSL_CTX_set_tlsext_ticket_key_cb.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: SSL_CTX_set_tlsext_ticket_key_cb.3,v 1.2 2016/12/16 15:39:08 jmc Exp $ +.\" $OpenBSD: SSL_CTX_set_tlsext_ticket_key_cb.3,v 1.3 2017/04/10 14:00:51 schwarze Exp $ .\" OpenSSL b97fdb57 Nov 11 09:33:09 2016 +0100 .\" .\" This file was written by Rich Salz @@ -48,7 +48,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: December 16 2016 $ +.Dd $Mdocdate: April 10 2017 $ .Dt SSL_CTX_SET_TLSEXT_TICKET_KEY_CB 3 .Os .Sh NAME @@ -286,8 +286,8 @@ static int ssl_tlsext_ticket_key_cb(SSL *s, unsigned char key_name[16], } .Ed .Sh SEE ALSO -.Xr ssl 3 , .Xr SSL_CTX_add_session 3 , +.Xr SSL_CTX_callback_ctrl 3 , .Xr SSL_CTX_sess_number 3 , .Xr SSL_CTX_sess_set_get_cb 3 , .Xr SSL_CTX_set_session_id_context 3 , diff --git a/lib/libssl/man/SSL_num_renegotiations.3 b/lib/libssl/man/SSL_num_renegotiations.3 index d1986a674c6..11aadc0e26f 100644 --- a/lib/libssl/man/SSL_num_renegotiations.3 +++ b/lib/libssl/man/SSL_num_renegotiations.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: SSL_num_renegotiations.3,v 1.1 2016/12/10 13:54:32 schwarze Exp $ +.\" $OpenBSD: SSL_num_renegotiations.3,v 1.2 2017/04/10 14:00:51 schwarze Exp $ .\" .\" Copyright (c) 2016 Ingo Schwarze .\" @@ -14,7 +14,7 @@ .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. .\" -.Dd $Mdocdate: December 10 2016 $ +.Dd $Mdocdate: April 10 2017 $ .Dt SSL_NUM_RENEGOTIATIONS 3 .Os .Sh NAME @@ -64,6 +64,7 @@ These functions are implemented as macros. All these functions return a number of renegotiations. .Sh SEE ALSO .Xr BIO_set_ssl_renegotiate_bytes 3 , +.Xr SSL_ctrl 3 , .Xr SSL_read 3 , .Xr SSL_renegotiate 3 , .Xr SSL_write 3 diff --git a/lib/libssl/man/SSL_session_reused.3 b/lib/libssl/man/SSL_session_reused.3 index f7fae785635..56c892605d2 100644 --- a/lib/libssl/man/SSL_session_reused.3 +++ b/lib/libssl/man/SSL_session_reused.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: SSL_session_reused.3,v 1.2 2016/12/04 12:20:54 schwarze Exp $ +.\" $OpenBSD: SSL_session_reused.3,v 1.3 2017/04/10 14:00:51 schwarze Exp $ .\" OpenSSL b97fdb57 Nov 11 09:33:09 2016 +0100 .\" .\" This file was written by Lutz Jaenicke . @@ -48,7 +48,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: December 4 2016 $ +.Dd $Mdocdate: April 10 2017 $ .Dt SSL_SESSION_REUSED 3 .Os .Sh NAME @@ -74,6 +74,6 @@ A new session was negotiated. A session was reused. .El .Sh SEE ALSO -.Xr ssl 3 , +.Xr SSL_ctrl 3 , .Xr SSL_CTX_set_session_cache_mode 3 , .Xr SSL_set_session 3 diff --git a/lib/libssl/man/SSL_set_max_send_fragment.3 b/lib/libssl/man/SSL_set_max_send_fragment.3 index a78016b99ef..1aa5589cf8c 100644 --- a/lib/libssl/man/SSL_set_max_send_fragment.3 +++ b/lib/libssl/man/SSL_set_max_send_fragment.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: SSL_set_max_send_fragment.3,v 1.2 2016/12/16 15:39:08 jmc Exp $ +.\" $OpenBSD: SSL_set_max_send_fragment.3,v 1.3 2017/04/10 14:00:51 schwarze Exp $ .\" OpenSSL doc/man3/SSL_CTX_set_split_send_fragment.pod .\" OpenSSL 6782e5fd Oct 21 16:16:20 2016 +0100 .\" @@ -49,7 +49,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: December 16 2016 $ +.Dd $Mdocdate: April 10 2017 $ .Dt SSL_SET_MAX_SEND_FRAGMENT 3 .Os .Sh NAME @@ -85,5 +85,6 @@ These functions are implemented using macros. .Sh RETURN VALUES These functions return 1 on success or 0 on failure. .Sh SEE ALSO +.Xr SSL_ctrl 3 , .Xr SSL_CTX_set_read_ahead 3 , .Xr SSL_pending 3 diff --git a/lib/libssl/man/ssl.3 b/lib/libssl/man/ssl.3 index e45e02e1aeb..25834c37a88 100644 --- a/lib/libssl/man/ssl.3 +++ b/lib/libssl/man/ssl.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: ssl.3,v 1.5 2016/12/16 15:39:08 jmc Exp $ +.\" $OpenBSD: ssl.3,v 1.6 2017/04/10 14:00:51 schwarze Exp $ .\" OpenSSL e330f55d Nov 11 00:51:04 2016 +0100 .\" .\" This file was written by Ralf S. Engelschall , @@ -50,7 +50,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: December 16 2016 $ +.Dd $Mdocdate: April 10 2017 $ .Dt SSL 3 .Os .Sh NAME @@ -199,12 +199,10 @@ Constructors and destructors: .Xr SSL_CTX_free 3 .Pp Configuration functions: -.Xr SSL_CTX_add_extra_chain_cert 3 , .Xr SSL_CTX_ctrl 3 , .Xr SSL_CTX_flush_sessions 3 , .Xr SSL_CTX_get_verify_mode 3 , .Xr SSL_CTX_load_verify_locations 3 , -.Xr SSL_CTX_sess_set_cache_size 3 , .Xr SSL_CTX_sess_set_get_cb 3 , .Xr SSL_CTX_set_alpn_select_cb 3 , .Xr SSL_CTX_set_cert_store 3 , @@ -215,27 +213,19 @@ Configuration functions: .Xr SSL_CTX_set_default_passwd_cb 3 , .Xr SSL_CTX_set_generate_session_id 3 , .Xr SSL_CTX_set_info_callback 3 , -.Xr SSL_CTX_set_max_cert_list 3 , -.Xr SSL_CTX_set_mode 3 , .Xr SSL_CTX_set_msg_callback 3 , -.Xr SSL_CTX_set_options 3 , .Xr SSL_CTX_set_quiet_shutdown 3 , .Xr SSL_CTX_set_read_ahead 3 , -.Xr SSL_CTX_set_session_cache_mode 3 , .Xr SSL_CTX_set_session_id_context 3 , .Xr SSL_CTX_set_timeout 3 , -.Xr SSL_CTX_set_tlsext_status_cb 3 , -.Xr SSL_CTX_set_tlsext_ticket_key_cb 3 , .Xr SSL_CTX_set_tmp_dh_callback 3 , .Xr SSL_CTX_set_tmp_rsa_callback 3 , .Xr SSL_CTX_set_verify 3 , .Xr SSL_CTX_use_certificate 3 , .Xr SSL_set1_param 3 , -.Xr SSL_set_max_send_fragment 3 .Pp Accessors: .Xr SSL_CTX_get_ex_new_index 3 , -.Xr SSL_CTX_sess_number 3 , .Xr SSL_CTX_sessions 3 , .Xr SSL_get_client_CA_list 3 .Ss Sessions @@ -301,10 +291,8 @@ Accessors: .Xr SSL_get_state 3 , .Xr SSL_get_verify_result 3 , .Xr SSL_get_version 3 , -.Xr SSL_num_renegotiations 3 , .Xr SSL_pending 3 , .Xr SSL_rstate_string 3 , -.Xr SSL_session_reused 3 , .Xr SSL_set_shutdown 3 , .Xr SSL_set_verify_result 3 , .Xr SSL_state_string 3 ,