Document SSL_CIPHER environment variable

It is apparently checked/used by openssl s_time when -cipher option
is not set.

Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org>

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/28025)
This commit is contained in:
Eugene Syromiatnikov 2025-07-10 19:05:33 +02:00 committed by Neil Horman
parent deed2379a7
commit 0afaa27df7
2 changed files with 18 additions and 0 deletions

View File

@ -134,6 +134,18 @@ See L<openssl(1)/TLS Version Options>.
=back
=head1 ENVIRONMENT
=over 4
=item B<SSL_CIPHER>
If the B<-cipher> option is not specified, the contents of this environment
variable are used to modify the TLSv1.2 and below cipher list sent
by the client the same way the aforementioned option does.
=back
=head1 NOTES
This command can be used to measure the performance of an SSL connection.

View File

@ -210,6 +210,12 @@ Use of this feature should be restricted to test and debug environments only.
Specify the default directory or file containing CA certificates.
See L<SSL_CTX_load_verify_locations(3)>.
=item B<SSL_CIPHER>
Used by L<openssl-s_time(1)> in case B<-cipher> option (that allows modifying
TLSv1.2 and below cipher list sent by the client) is not provided,
for specification of the aforementioned ciphers.
=item B<TSGET>
Additional arguments for the L<tsget(1)> command.