Following the last commit, this ought to complete the page for consistency: better readable and tags for free.
Feedback? Objections? OK? Index: tls_config_set_protocols.3 =================================================================== RCS file: /cvs/src/lib/libtls/man/tls_config_set_protocols.3,v retrieving revision 1.9 diff -u -p -r1.9 tls_config_set_protocols.3 --- tls_config_set_protocols.3 30 Dec 2020 13:38:13 -0000 1.9 +++ tls_config_set_protocols.3 30 Dec 2020 17:56:40 -0000 @@ -140,11 +140,24 @@ for further information. .Fn tls_config_set_dheparams specifies the parameters that will be used during Diffie-Hellman Ephemeral (DHE) key exchange. -Possible values are "none", "auto" and "legacy". -In "auto" mode, the key size for the ephemeral key is automatically selected +Possible values are: +.Pp +.Bl -tag -width "legacy" -offset indent -compact +.It Dv none +.It Dv auto +.It Dv legacy +.El +.Pp +In +.Dv auto +mode, the key size for the ephemeral key is automatically selected based on the size of the private key being used for signing. -In "legacy" mode, 1024 bit ephemeral keys are used. -The default value is "none", which disables DHE key exchange. +In +.Dv legacy +mode, 1024 bit ephemeral keys are used. +The default value is +.Dv none , +which disables DHE key exchange. .Pp .Fn tls_config_set_ecdhecurves specifies the names of the elliptic curves that may be used during Elliptic
