summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorHugo Landau <hlandau@openssl.org>2023-05-08 19:42:40 +0100
committerHugo Landau <hlandau@openssl.org>2023-05-12 14:47:15 +0100
commit5fc256cd6b991cf0fb5f7cb1da7be14c7e90653f (patch)
treef7d79b98c8ed5952afad8d89ab6378b2433d1e93
parent4f2d32d6b6b4b80ff5f55c5462b545516d252d11 (diff)
downloadopenssl-new-5fc256cd6b991cf0fb5f7cb1da7be14c7e90653f.tar.gz
QUIC MSST: Documentation fixes
Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20765)
-rw-r--r--doc/man3/SSL_accept_stream.pod3
-rw-r--r--doc/man3/SSL_attach_stream.pod2
-rw-r--r--doc/man3/SSL_get_conn_close_info.pod22
-rw-r--r--doc/man3/SSL_get_stream_read_state.pod16
-rw-r--r--doc/man3/SSL_set_incoming_stream_reject_policy.pod4
-rw-r--r--doc/man3/SSL_stream_reset.pod6
-rw-r--r--include/internal/quic_stream_map.h2
7 files changed, 28 insertions, 27 deletions
diff --git a/doc/man3/SSL_accept_stream.pod b/doc/man3/SSL_accept_stream.pod
index 430b3dd364..e72af899b3 100644
--- a/doc/man3/SSL_accept_stream.pod
+++ b/doc/man3/SSL_accept_stream.pod
@@ -31,7 +31,7 @@ SSL object; for more information, see L<SSL_free(3)>.
This function will block if the QUIC connection SSL object is configured in
blocking mode (see L<SSL_set_blocking_mode(3)>), but this may be bypassed by
-passing the flag B<SSL_ACCEPT_STREAM_NO_BLOCK> in B<flags>. If this flag is set,
+passing the flag B<SSL_ACCEPT_STREAM_NO_BLOCK> in I<flags>. If this flag is set,
this function never blocks.
SSL_get_accept_stream_queue_len() returns the number of incoming streams
@@ -59,6 +59,7 @@ man(7) pages are merged
SSL_accept_stream() returns a newly allocated QUIC stream SSL object, or NULL if
no new incoming streams are available, or if the connection has been terminated,
or if called on a SSL object other than a QUIC connection SSL object.
+L<SSL_get_error(3)> can be used to obtain further information in this case.
SSL_get_accept_stream_queue_len() returns the number of incoming streams
currently waiting in the accept queue, or 0 if called on a SSL object other than
diff --git a/doc/man3/SSL_attach_stream.pod b/doc/man3/SSL_attach_stream.pod
index 8f837acc6e..298000ac2e 100644
--- a/doc/man3/SSL_attach_stream.pod
+++ b/doc/man3/SSL_attach_stream.pod
@@ -87,7 +87,7 @@ SSL_set_default_stream_mode() can be used to configure or disable default stream
handling. It can only be called on a QUIC connection SSL object prior to any
default stream being created. If used, it is recommended to call it immediately
after calling L<SSL_new(3)>, prior to initiating a connection. The argument
-B<mode> may be one of the following options:
+I<mode> may be one of the following options:
=over 4
diff --git a/doc/man3/SSL_get_conn_close_info.pod b/doc/man3/SSL_get_conn_close_info.pod
index 5f9a2c3e38..9fbf6fe9bc 100644
--- a/doc/man3/SSL_get_conn_close_info.pod
+++ b/doc/man3/SSL_get_conn_close_info.pod
@@ -24,41 +24,41 @@ SSL_get_conn_close_info - get information about why a QUIC connection was closed
The SSL_get_conn_close_info() function provides information about why and how a
QUIC connection was closed.
-Connection closure information is written to B<*info>, which must be non-NULL.
-B<info_len> must be set to B<sizeof(*info)>.
+Connection closure information is written to I<*info>, which must be non-NULL.
+I<info_len> must be set to C<sizeof(*info)>.
The following fields are set:
=over 4
-=item B<error_code>
+=item I<error_code>
This is a 62-bit QUIC error code. It is either a 62-bit application error code
-(if B<is_transport> is 0) or a 62-bit standard QUIC transport error code (if
-B<is_transport> is 1).
+(if I<is_transport> is 0) or a 62-bit standard QUIC transport error code (if
+I<is_transport> is 1).
-=item B<reason>
+=item I<reason>
If non-NULL, this is intended to be a UTF-8 textual string briefly describing
the reason for connection closure. The length of the reason string in bytes is
-given in B<reason_len>. While, if non-NULL, OpenSSL guarantees that this string
+given in I<reason_len>. While, if non-NULL, OpenSSL guarantees that this string
will be zero terminated, consider that this buffer may originate from the
(untrusted) peer and thus may also contain zero bytes elsewhere. Therefore, use
-of B<reason_len> is recommended.
+of I<reason_len> is recommended.
While it is intended as per the QUIC protocol that this be a UTF-8 string, there
is no guarantee that this is the case for strings received from the peer.
-=item B<is_local>
+=item I<is_local>
If 1, connection closure was locally triggered. This could be due to an
-application request (e.g. if B<is_transport> is 0), or (if B<is_transport> is 1)
+application request (e.g. if I<is_transport> is 0), or (if I<is_transport> is 1)
due to logic internal to the QUIC implementation (for example, if the peer
engages in a protocol violation, or an idle timeout occurs).
If 0, connection closure was remotely triggered.
-=item B<is_transport>
+=item I<is_transport>
If 1, connection closure was triggered for QUIC protocol reasons.
diff --git a/doc/man3/SSL_get_stream_read_state.pod b/doc/man3/SSL_get_stream_read_state.pod
index d04a1ef88a..7373e1dbff 100644
--- a/doc/man3/SSL_get_stream_read_state.pod
+++ b/doc/man3/SSL_get_stream_read_state.pod
@@ -36,24 +36,24 @@ They both return one of the following values:
=over 4
-=item SSL_STREAM_STATE_NONE
+=item B<SSL_STREAM_STATE_NONE>
This value is returned if called on a non-QUIC SSL object, or on a QUIC
connection SSL object without a default stream attached.
-=item SSL_STREAM_STATE_OK
+=item B<SSL_STREAM_STATE_OK>
This value is returned on a stream which has not been concluded and remains
healthy.
-=item SSL_STREAM_STATE_WRONG_DIR
+=item B<SSL_STREAM_STATE_WRONG_DIR>
This value is returned if SSL_get_stream_read_state() is called on a
locally-initiated (and thus send-only) unidirectional stream, or, conversely, if
SSL_get_stream_write_state() is called on a remotely-initiated (and thus
receive-only) unidirectional stream.
-=item SSL_STREAM_STATE_FINISHED
+=item B<SSL_STREAM_STATE_FINISHED>
For SSL_get_stream_read_state(), this value is returned when the remote peer has
signalled the end of the receiving part of the stream. Note that there may still
@@ -64,7 +64,7 @@ For SSL_get_stream_write_state(), this value is returned when the local
application has concluded the stream using L<SSL_stream_conclude(3)>. Future
L<SSL_write(3)> calls will not succeed.
-=item SSL_STREAM_STATE_RESET_LOCAL
+=item B<SSL_STREAM_STATE_RESET_LOCAL>
This value is returned when the applicable stream part was reset by the local
application.
@@ -83,7 +83,7 @@ When this value is returned, the application error code which was signalled can
be obtained by calling SSL_get_stream_read_error_code() or
SSL_get_stream_write_error_code() as appropriate.
-=item SSL_STREAM_STATE_RESET_REMOTE
+=item B<SSL_STREAM_STATE_RESET_REMOTE>
This value is returned when the applicable stream part was reset by the remote
peer.
@@ -101,7 +101,7 @@ When this value is returned, the application error code which was signalled can
be obtained by calling SSL_get_stream_read_error_code() or
SSL_get_stream_write_error_code() as appropriate.
-=item SSL_STREAM_STATE_CONN_CLOSED
+=item B<SSL_STREAM_STATE_CONN_CLOSED>
The QUIC connection to which the stream belongs was closed. You can obtain
information about the circumstances of this closure using
@@ -115,7 +115,7 @@ SSL_get_stream_write_state() will also return this state.
SSL_get_stream_read_error_code() and SSL_get_stream_write_error_code() provide
the application error code which was signalled during non-normal termination of
the receiving or sending parts of a stream, respectively. On success, the
-application error code is written to B<*app_error_code>.
+application error code is written to I<*app_error_code>.
=head1 NOTES
diff --git a/doc/man3/SSL_set_incoming_stream_reject_policy.pod b/doc/man3/SSL_set_incoming_stream_reject_policy.pod
index 3e859b26ad..dfc3dffb03 100644
--- a/doc/man3/SSL_set_incoming_stream_reject_policy.pod
+++ b/doc/man3/SSL_set_incoming_stream_reject_policy.pod
@@ -28,11 +28,11 @@ operation with a default stream on a QUIC connection SSL object are not passed
remotely-initiated streams by a peer which those applications are not prepared
to handle.
-B<app_error_code> is an application error code which will be used in any QUIC
+I<app_error_code> is an application error code which will be used in any QUIC
B<STOP_SENDING> or B<RESET_STREAM> frames generated to implement the rejection
policy. The default application error code is 0.
-The valid values for B<policy> are:
+The valid values for I<policy> are:
=over 4
diff --git a/doc/man3/SSL_stream_reset.pod b/doc/man3/SSL_stream_reset.pod
index 3f9159024a..e2f6fd35bc 100644
--- a/doc/man3/SSL_stream_reset.pod
+++ b/doc/man3/SSL_stream_reset.pod
@@ -22,10 +22,10 @@ The SSL_stream_reset() function resets the send part of a QUIC stream when
called on a QUIC stream SSL object, or on a QUIC connection SSL object with a
default stream attached.
-If B<args> is non-NULL, B<args_len> must be set to B<sizeof(*args)>.
+If I<args> is non-NULL, I<args_len> must be set to C<sizeof(*args)>.
-B<quic_error_code> is an application-specified error code, which must be in the
-range [0, 2**62-1]. If B<args> is NULL, a value of 0 is used.
+I<quic_error_code> is an application-specified error code, which must be in the
+range [0, 2**62-1]. If I<args> is NULL, a value of 0 is used.
Resetting a stream indicates to an application that the sending part of the
stream is terminating abnormally. When a stream is reset, the implementation
diff --git a/include/internal/quic_stream_map.h b/include/internal/quic_stream_map.h
index 920f3144b4..1af0c57d1e 100644
--- a/include/internal/quic_stream_map.h
+++ b/include/internal/quic_stream_map.h
@@ -69,7 +69,7 @@ struct quic_stream_st {
/*
* Application Error Code (AEC) for incoming RESET_STREAM frame.
- * This is only valid if peer_reset_stream is 1.
+ * This is only valid if peer_reset_stream is 1.
*/
uint64_t peer_reset_stream_aec;