summaryrefslogtreecommitdiffstats
path: root/README
diff options
context:
space:
mode:
authorPatrick McDermott <patrick.mcdermott@libiquity.com>2019-08-03 19:21:42 (EDT)
committer Patrick McDermott <patrick.mcdermott@libiquity.com>2019-08-03 19:21:42 (EDT)
commit3bc0ee2547cb2f6d3ca0889e35bd22b4cd5ffdbb (patch)
tree3f9caa362a4e2725dd26db4db1baef8536c3c9f7 /README
parente1c57ca35b43e6d85749be1f44bdfa4a5359d4e5 (diff)
README: Stronger by default than openssl s_client
Diffstat (limited to 'README')
-rw-r--r--README13
1 files changed, 13 insertions, 0 deletions
diff --git a/README b/README
index d20ccb9..4438cd4 100644
--- a/README
+++ b/README
@@ -6,6 +6,19 @@ It is similar to the OpenSSL command-line tool, providing only a limited
`s_client` TLS client command. The primary goal is to provide enough
functionality for use by BusyBox's wget applet.
+wolfssl-util's `s_client` command is designed to be stronger by default than
+openssl's, as the latter is only meant to be a "diagnostic tool". That is, the
+following command:
+
+ $ wolfssl-util s_client -quiet -connect ${host}:${port} \
+ > -servername ${servername}
+
+is roughly equivalent to the more complicated:
+
+ $ openssl s_client -quiet -connect ${host}:${port} \
+ > -servername ${servername} -verify 9 -verify_return_error \
+ > -no_ssl3 -no_tls1 -no_tls1_1
+
This utility is in no way authored by or affiliated with wolfSSL Inc. or its
contributors.