Lines Matching +full:no +full:- +full:srtp
2 * Copyright 1995-2022 The OpenSSL Project Authors. All Rights Reserved.
39 /*-
40 * Version 0 - initial version
41 * Version 1 - added the optional peer certificate
100 # define SSL_TXT_DHE "DHE"/* same as "kDHE:-ADH" */
106 # define SSL_TXT_ECDHE "ECDHE"/* same as "kECDHE:-AECDH" */
151 /*-
152 * COMPLEMENTOF* definitions. These identifiers are used to (de-select)
162 * DEFAULT gets, as only selection is being done and no sorting as needed
170 * an application-defined cipher list string starts with 'DEFAULT'.
221 /* SRTP protection profiles for use with the use_srtp extension (RFC 5764)*/
316 /* In TLSv1.3 allow a non-(ec)dhe based kex_mode */
346 /* Disable encrypt-then-mac */
372 * Switches off automatic TLSv1.3 anti-replay protection for early data. This
373 * is a server-side option only (no effect on the client).
394 * Make server add server-hello extension from early version of cryptopro
420 /* Dead forever, see CVE-2010-4180 */
461 * misconception that non-blocking SSL_write() behaves like non-blocking
486 * draft-ietf-tls-downgrade-scsv-00 for details. DO NOT ENABLE THIS if your
489 * draft-ietf-tls-downgrade-scsv-00.
499 * used for computing the endpoint-pair shared secret. Required for
502 * - OpenSSL 1.0.0 series
503 * - OpenSSL 1.0.1 series
504 * - OpenSSL 1.0.2 series
505 * - OpenSSL 1.1.0 series
506 * - OpenSSL 1.1.1 and 1.1.1a
575 /* Maximum length of the application-controlled segment of a a TLSv1.3 cookie */
660 * a server. Return value should be zero on an error, non-zero to proceed.
662 * otherwise the SSL handshake will fail with an error - callbacks can do
900 /* These will only be used when doing non-blocking IO */
948 # include <openssl/srtp.h> /* Support for the use_srtp extension */
973 /* -1 used so that this is an invalid value for the on-the-wire protocol */
974 #define SSL_KEY_UPDATE_NONE -1
975 /* Values as defined for the on-the-wire protocol */
988 * TLS_ST_BEFORE = No handshake has been initiated yet
1045 * Most of the following state values are no longer used and are defined to be
1047 * defines have an equivalent and are set to a dummy value (-1). SSL_ST_CONNECT
1079 * The following 3 states are kept in ssl->rlayer.rstate when reads fail, you
1086 /*-
1088 * -- that we sent (SSL_get_finished)
1089 * -- that we expected from peer (SSL_get_peer_finished).
1090 * Returns length (0 == no Finished so far), copies up to 'count' bytes.
1808 # define SSL_CLIENT_HELLO_RETRY (-1)
2115 /* Pre-shared secret session resumption functions */
2197 * If the callback returns a non-positive result, the connection is terminated.
2203 * NOTE: A side-effect of setting a CT callback is that an OCSP stapled response
2217 * The validation type enumerates the available behaviours of the built-in SSL
2227 * Enable CT by setting up a callback that implements one of the built-in
2238 * Report whether a non-NULL callback is enabled.
2273 * - SSL_CTX_set_default_ctlog_list_file
2274 * - SSL_CTX_set_ctlog_list_file
2275 * - SSL_CTX_set_ctlog_store
2392 /* No ticket present */