diff --git a/doc/ssl/SSL_CTX_set_cipher_list.pod b/doc/ssl/SSL_CTX_set_cipher_list.pod index 0fec5682965cf1f1bc2d5539c8a44c1375128a2c..ed64f6415702949956e45b57d91801743b3ba1a5 100644 --- a/doc/ssl/SSL_CTX_set_cipher_list.pod +++ b/doc/ssl/SSL_CTX_set_cipher_list.pod @@ -41,10 +41,12 @@ RSA export ciphers with a keylength of 512 bits for the RSA key require a temporary 512 bit RSA key, as typically the supplied key has a length of 1024 bit (see L). -RSA ciphers using EDH need a certificate and key and additional DH-parameters. +RSA ciphers using EDH need a certificate and key and additional DH-parameters +(see L). A DSA cipher can only be chosen, when a DSA certificate is available. -DSA ciphers always use DH key exchange and therefore need DH-parameters. +DSA ciphers always use DH key exchange and therefore need DH-parameters +(see L). When these conditions are not met for any cipher in the list (e.g. a client only supports export RSA ciphers with a asymmetric key length