Dead code removal: Fortezza identifiers

[oweals/openssl.git] / doc / ssl / SSL_clear.pod

diff --git a/doc/ssl/SSL_clear.pod b/doc/ssl/SSL_clear.pod
index 8e077e31c9a8d9633734cab986e51136f3b30d57..ba192bd518aebed9e3a4089be7b5cab49ef6371d 100644 (file)
--- a/doc/ssl/SSL_clear.pod
+++ b/doc/ssl/SSL_clear.pod
@@ -39,10 +39,16 @@ for a description of the method's properties.
 SSL_clear() resets the SSL object to allow for another connection. The
 reset operation however keeps several settings of the last sessions
 (some of these settings were made automatically during the last
 SSL_clear() resets the SSL object to allow for another connection. The
 reset operation however keeps several settings of the last sessions
 (some of these settings were made automatically during the last

-handshake). It only makes sense when opening a new session (or reusing
-an old one) with the same peer that shares these settings.
-SSL_clear() is not a short form for the sequence
-L<SSL_free(3)|SSL_free(3)>; L<SSL_new(3)|SSL_new(3)>; .
+handshake). It only makes sense for a new connection with the exact
+same peer that shares these settings, and may fail if that peer
+changes its settings between connections. Use the sequence
+L<SSL_get_session(3)|SSL_get_session(3)>;
+L<SSL_new(3)|SSL_new(3)>;
+L<SSL_set_session(3)|SSL_set_session(3)>;
+L<SSL_free(3)|SSL_free(3)>
+instead to avoid such failures
+(or simply L<SSL_free(3)|SSL_free(3)>; L<SSL_new(3)|SSL_new(3)>
+if session reuse is not desired).

 
 =head1 RETURN VALUES
 
 
 =head1 RETURN VALUES
 


@@ -50,12 +56,12 @@ The following return values can occur:
 
 =over 4
 
 
 =over 4
 

-=item 0
+=item Z<>0

 
 The SSL_clear() operation could not be performed. Check the error stack to
 find out the reason.
 
 
 The SSL_clear() operation could not be performed. Check the error stack to
 find out the reason.
 

-=item 1
+=item Z<>1

 
 The SSL_clear() operation was successful.
 
 
 The SSL_clear() operation was successful.