mirror of
https://github.com/sigmasternchen/php-doc-en
synced 2025-03-27 06:18:56 +00:00
07eb995356
git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@312693 c90b9560-bf6c-de11-be94-00142212c4b1
514 lines
12 KiB
XML
514 lines
12 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<!-- $Revision$ -->
|
|
<appendix xml:id="openssl.constants" xmlns="http://docbook.org/ns/docbook">
|
|
&reftitle.constants;
|
|
&extension.constants;
|
|
<section xml:id="openssl.purpose-check">
|
|
<title>Purpose checking flags</title>
|
|
<variablelist>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>X509_PURPOSE_SSL_CLIENT</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>X509_PURPOSE_SSL_SERVER</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>X509_PURPOSE_NS_SSL_SERVER</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>X509_PURPOSE_SMIME_SIGN</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>X509_PURPOSE_SMIME_ENCRYPT</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>X509_PURPOSE_CRL_SIGN</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>X509_PURPOSE_ANY</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
</variablelist>
|
|
</section>
|
|
|
|
<section xml:id="openssl.padding">
|
|
<title>Padding flags</title>
|
|
<variablelist>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_PKCS1_PADDING</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_SSLV23_PADDING</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_NO_PADDING</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_PKCS1_OAEP_PADDING</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
</variablelist>
|
|
</section>
|
|
|
|
<section xml:id="openssl.key-types">
|
|
<title>Key types</title>
|
|
<variablelist>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_KEYTYPE_RSA</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_KEYTYPE_DSA</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_KEYTYPE_DH</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
</variablelist>
|
|
</section>
|
|
|
|
<section xml:id="openssl.pkcs7.flags">
|
|
<title><acronym>PKCS7</acronym> Flags/Constants</title>
|
|
<para>
|
|
The S/MIME functions make use of flags which are specified using a
|
|
bitfield which can include one or more of the following values:
|
|
<table>
|
|
<title><acronym>PKCS7</acronym> CONSTANTS</title>
|
|
<tgroup cols="2">
|
|
<thead>
|
|
<row>
|
|
<entry>Constant</entry>
|
|
<entry>Description</entry>
|
|
</row>
|
|
</thead>
|
|
<tbody>
|
|
<row>
|
|
<entry><constant>PKCS7_TEXT</constant></entry>
|
|
<entry>Adds text/plain content type headers to encrypted/signed
|
|
message. If decrypting or verifying, it strips those headers from
|
|
the output - if the decrypted or verified message is not of MIME type
|
|
text/plain then an error will occur.</entry>
|
|
</row>
|
|
<row>
|
|
<entry><constant>PKCS7_BINARY</constant></entry>
|
|
<entry>Normally the input message is converted to "canonical" format
|
|
which is effectively using <literal>CR</literal> and <literal>LF</literal>
|
|
as end of line: as required by the S/MIME specification. When this
|
|
option is present, no translation occurs. This is useful when
|
|
handling binary data which may not be in MIME format.</entry>
|
|
</row>
|
|
<row>
|
|
<entry><constant>PKCS7_NOINTERN</constant></entry>
|
|
<entry>When verifying a message, certificates (if
|
|
any) included in the message are normally searched for the
|
|
signing certificate. With this option only the
|
|
certificates specified in the <parameter>extracerts</parameter>
|
|
parameter of <function>openssl_pkcs7_verify</function> are
|
|
used. The supplied certificates can still be used as
|
|
untrusted CAs however.
|
|
</entry>
|
|
</row>
|
|
<row>
|
|
<entry><constant>PKCS7_NOVERIFY</constant></entry>
|
|
<entry>Do not verify the signers certificate of a signed
|
|
message.</entry>
|
|
</row>
|
|
<row>
|
|
<entry><constant>PKCS7_NOCHAIN</constant></entry>
|
|
<entry>Do not chain verification of signers certificates: that is
|
|
don't use the certificates in the signed message as untrusted CAs.
|
|
</entry>
|
|
</row>
|
|
<row>
|
|
<entry><constant>PKCS7_NOCERTS</constant></entry>
|
|
<entry>When signing a message the signer's certificate is normally
|
|
included - with this option it is excluded. This will reduce the
|
|
size of the signed message but the verifier must have a copy of the
|
|
signers certificate available locally (passed using the
|
|
<parameter>extracerts</parameter> to
|
|
<function>openssl_pkcs7_verify</function> for example).
|
|
</entry>
|
|
</row>
|
|
<row>
|
|
<entry><constant>PKCS7_NOATTR</constant></entry>
|
|
<entry>Normally when a message is signed, a set of attributes are
|
|
included which include the signing time and the supported symmetric
|
|
algorithms. With this option they are not included.
|
|
</entry>
|
|
</row>
|
|
<row>
|
|
<entry><constant>PKCS7_DETACHED</constant></entry>
|
|
<entry>When signing a message, use cleartext signing with the MIME
|
|
type <literal>"multipart/signed"</literal>. This is the default
|
|
if you do not specify any <parameter>flags</parameter> to
|
|
<function>openssl_pkcs7_sign</function>.
|
|
If you turn this option off, the message will be signed using
|
|
opaque signing, which is more resistant to translation by mail relays
|
|
but cannot be read by mail agents that do not support S/MIME.</entry>
|
|
</row>
|
|
<row>
|
|
<entry><constant>PKCS7_NOSIGS</constant></entry>
|
|
<entry>Don't try and verify the signatures on a message</entry>
|
|
</row>
|
|
</tbody>
|
|
</tgroup>
|
|
</table>
|
|
</para>
|
|
<note>
|
|
<para>These constants were added in 4.0.6.</para>
|
|
</note>
|
|
</section>
|
|
|
|
<section xml:id="openssl.signature-algos">
|
|
<title>Signature Algorithms</title>
|
|
<variablelist>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_ALGO_DSS1</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_ALGO_SHA1</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
Used as default algorithm by <function>openssl_sign</function> and
|
|
<function>openssl_verify</function>.
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_ALGO_MD5</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_ALGO_MD4</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_ALGO_MD2</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
</variablelist>
|
|
|
|
<note>
|
|
<para>These constants were added in 5.0.0.</para>
|
|
</note>
|
|
</section>
|
|
|
|
<section xml:id="openssl.ciphers">
|
|
<title>Ciphers</title>
|
|
<variablelist>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_CIPHER_RC2_40</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_CIPHER_RC2_128</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_CIPHER_RC2_64</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_CIPHER_DES</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_CIPHER_3DES</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
</variablelist>
|
|
<note>
|
|
<para>These constants were added in 4.3.0.</para>
|
|
</note>
|
|
<variablelist>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_CIPHER_AES_128_CBC</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_CIPHER_AES_192_CBC</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_CIPHER_AES_256_CBC</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
</variablelist>
|
|
<note>
|
|
<para>These constants were added in 5.4.0.</para>
|
|
</note>
|
|
</section>
|
|
|
|
<section xml:id="openssl.constversion">
|
|
<title>Version constants</title>
|
|
<variablelist>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_VERSION_TEXT</constant>
|
|
(<type>string</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_VERSION_NUMBER</constant>
|
|
(<type>integer</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
</variablelist>
|
|
<note>
|
|
<para>These constants were added in 5.2.0.</para>
|
|
</note>
|
|
</section>
|
|
|
|
<section xml:id="openssl.constsni">
|
|
<title>Server Name Indication constants</title>
|
|
<variablelist>
|
|
<varlistentry>
|
|
<term>
|
|
<constant>OPENSSL_TLSEXT_SERVER_NAME</constant>
|
|
(<type>string</type>)
|
|
</term>
|
|
<listitem>
|
|
<simpara>
|
|
Whether SNI support is available or not.
|
|
</simpara>
|
|
</listitem>
|
|
</varlistentry>
|
|
</variablelist>
|
|
<note>
|
|
<para>
|
|
This constant were added in 5.3.2 and requires PHP to be
|
|
built with OpenSSL 0.9.8j or greater.
|
|
</para>
|
|
</note>
|
|
</section>
|
|
|
|
</appendix>
|
|
|
|
<!-- Keep this comment at the end of the file
|
|
Local variables:
|
|
mode: sgml
|
|
sgml-omittag:t
|
|
sgml-shorttag:t
|
|
sgml-minimize-attributes:nil
|
|
sgml-always-quote-attributes:t
|
|
sgml-indent-step:1
|
|
sgml-indent-data:t
|
|
indent-tabs-mode:nil
|
|
sgml-parent-document:nil
|
|
sgml-default-dtd-file:"~/.phpdoc/manual.ced"
|
|
sgml-exposed-tags:nil
|
|
sgml-local-catalogs:nil
|
|
sgml-local-ecat-files:nil
|
|
End:
|
|
vim600: syn=xml fen fdm=syntax fdl=2 si
|
|
vim: et tw=78 syn=sgml
|
|
vi: ts=1 sw=1
|
|
-->
|
|
|