wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/util/libssl.num

500 lines
33 KiB
Text
Raw Normal View History

New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_get_selected_srtp_profile 1 1_1_0 EXIST::FUNCTION:SRTP
SSL_set_read_ahead 2 1_1_0 EXIST::FUNCTION:
SSL_set_accept_state 3 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_cipher_list 4 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_srp_client_pwd_callback 5 1_1_0 EXIST::FUNCTION:SRP
SSL_copy_session_id 6 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_srp_password 7 1_1_0 EXIST::FUNCTION:SRP
SSL_shutdown 8 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_msg_callback 9 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get0_ticket 11 1_1_0 EXIST::FUNCTION:
SSL_get1_supported_ciphers 12 1_1_0 EXIST::FUNCTION:
SSL_state_string_long 13 1_1_0 EXIST::FUNCTION:
SSL_CTX_get0_certificate 14 1_1_0 EXIST::FUNCTION:
SSL_SESSION_set_ex_data 15 1_1_0 EXIST::FUNCTION:
SSL_get_verify_depth 16 1_1_0 EXIST::FUNCTION:
SSL_get0_dane 17 1_1_0 EXIST::FUNCTION:
SSL_CTX_sess_get_get_cb 18 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_default_passwd_cb_userdata 19 1_1_0 EXIST::FUNCTION:
SSL_set_tmp_dh_callback 20 1_1_0 EXIST::FUNCTION:DH
SSL_CTX_get_verify_depth 21 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_RSAPrivateKey_file 22 1_1_0 EXIST::FUNCTION:RSA
SSL_use_PrivateKey_file 23 1_1_0 EXIST::FUNCTION:
SSL_set_generate_session_id 24 1_1_0 EXIST::FUNCTION:
SSL_get_ex_data_X509_STORE_CTX_idx 25 1_1_0 EXIST::FUNCTION:
SSL_get_quiet_shutdown 26 1_1_0 EXIST::FUNCTION:
SSL_dane_enable 27 1_1_0 EXIST::FUNCTION:
SSL_COMP_add_compression_method 28 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_RSAPrivateKey 29 1_1_0 EXIST::FUNCTION:RSA
SSL_CTX_sess_get_new_cb 30 1_1_0 EXIST::FUNCTION:
d2i_SSL_SESSION 31 1_1_0 EXIST::FUNCTION:
SSL_use_PrivateKey_ASN1 32 1_1_0 EXIST::FUNCTION:
make update Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-08-05 08:58:16 +00:00
PEM_write_SSL_SESSION 33 1_1_0 EXIST::FUNCTION:STDIO
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_CTX_set_session_id_context 34 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_get_cipher_nid 35 1_1_0 EXIST::FUNCTION:
SSL_get_srp_g 36 1_1_0 EXIST::FUNCTION:SRP
SSL_want 37 1_1_0 EXIST::FUNCTION:
SSL_get_cipher_list 38 1_1_0 EXIST::FUNCTION:
SSL_get_verify_result 39 1_1_0 EXIST::FUNCTION:
SSL_renegotiate 40 1_1_0 EXIST::FUNCTION:
SSL_get_privatekey 41 1_1_0 EXIST::FUNCTION:
SSL_peek 42 1_1_0 EXIST::FUNCTION:
SRP_Calc_A_param 43 1_1_0 EXIST::FUNCTION:SRP
SSL_SESSION_get_ticket_lifetime_hint 44 1_1_0 EXIST::FUNCTION:
SSL_SRP_CTX_free 45 1_1_0 EXIST::FUNCTION:SRP
SSL_CTX_set_client_CA_list 46 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_next_proto_select_cb 47 1_1_0 EXIST::FUNCTION:NEXTPROTONEG
BIO_ssl_copy_session_id 48 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_security_callback 49 1_1_0 EXIST::FUNCTION:
SSL_CONF_cmd_value_type 50 1_1_0 EXIST::FUNCTION:
SSL_CTX_remove_session 51 1_1_0 EXIST::FUNCTION:
SSL_SESSION_new 52 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
TLSv1_2_server_method 53 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_2_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
BIO_new_buffer_ssl_connect 54 1_1_0 EXIST::FUNCTION:
SSL_CTX_set0_security_ex_data 55 1_1_0 EXIST::FUNCTION:
SSL_alert_desc_string 56 1_1_0 EXIST::FUNCTION:
SSL_get0_dane_authority 57 1_1_0 EXIST::FUNCTION:
SSL_set_purpose 58 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_PrivateKey_file 59 1_1_0 EXIST::FUNCTION:
SSL_get_rfd 60 1_1_0 EXIST::FUNCTION:
Have only one DSO_METHOD_openssl Instead of have every DSO_METHOD_xxx in all platforms, ensure that only one DSO_METHOD_openssl is available on all platforms. Reviewed-by: Tim Hudson <tjh@openssl.org>
2016-03-22 17:35:03 +00:00
DTLSv1_listen 61 1_1_0 EXIST::FUNCTION:SOCK
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_set_ssl_method 62 1_1_0 EXIST::FUNCTION:
SSL_get0_security_ex_data 63 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
SSLv3_client_method 64 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SSL3_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_set_security_level 65 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
DTLSv1_2_method 66 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_2_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_get_fd 67 1_1_0 EXIST::FUNCTION:
SSL_get1_session 68 1_1_0 EXIST::FUNCTION:
SSL_use_RSAPrivateKey 69 1_1_0 EXIST::FUNCTION:RSA
SSL_CTX_set_srp_cb_arg 70 1_1_0 EXIST::FUNCTION:SRP
SSL_CTX_add_session 71 1_1_0 EXIST::FUNCTION:
SSL_get_srp_N 72 1_1_0 EXIST::FUNCTION:SRP
SSL_has_matching_session_id 73 1_1_0 EXIST::FUNCTION:
make update Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-08-05 08:58:16 +00:00
PEM_read_SSL_SESSION 74 1_1_0 EXIST::FUNCTION:STDIO
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_get_shared_ciphers 75 1_1_0 EXIST::FUNCTION:
SSL_add1_host 76 1_1_0 EXIST::FUNCTION:
SSL_CONF_cmd_argv 77 1_1_0 EXIST::FUNCTION:
SSL_version 78 1_1_0 EXIST::FUNCTION:
SSL_SESSION_print 79 1_1_0 EXIST::FUNCTION:
SSL_get_client_ciphers 80 1_1_0 EXIST::FUNCTION:
SSL_get_srtp_profiles 81 1_1_0 EXIST::FUNCTION:SRTP
SSL_use_certificate_ASN1 82 1_1_0 EXIST::FUNCTION:
SSL_get_peer_certificate 83 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
DTLSv1_2_server_method 84 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_2_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_set_cert_cb 85 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_cookie_verify_cb 86 1_1_0 EXIST::FUNCTION:
SSL_get_shared_sigalgs 87 1_1_0 EXIST::FUNCTION:
SSL_config 88 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
TLSv1_1_client_method 89 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_1_METHOD
Support converting cipher name to RFC name and vice versa Fixes: issue #3747 make SSL_CIPHER_standard_name globally available and introduce a new function OPENSSL_cipher_name. A new option '-convert' is also added to 'openssl ciphers' app. Documentation and test cases are added. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/3859)
2017-06-29 19:06:19 +00:00
SSL_CIPHER_standard_name 90 1_1_0 EXIST::FUNCTION:
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_CTX_get_verify_mode 91 1_1_0 EXIST::FUNCTION:
SSL_get_all_async_fds 92 1_1_0 EXIST::FUNCTION:
SSL_CTX_check_private_key 93 1_1_0 EXIST::FUNCTION:
SSL_set_wfd 94 1_1_0 EXIST::FUNCTION:SOCK
SSL_get_client_CA_list 95 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_set_flags 96 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_srp_username_callback 97 1_1_0 EXIST::FUNCTION:SRP
SSL_connect 98 1_1_0 EXIST::FUNCTION:
SSL_get_psk_identity 99 1_1_0 EXIST::FUNCTION:PSK
SSL_CTX_use_certificate_file 100 1_1_0 EXIST::FUNCTION:
SSL_set_session_ticket_ext 101 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_psk_server_callback 102 1_1_0 EXIST::FUNCTION:PSK
SSL_get_sigalgs 103 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_next_protos_advertised_cb 104 1_1_0 EXIST::FUNCTION:NEXTPROTONEG
SSL_CTX_set_trust 105 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_verify 106 1_1_0 EXIST::FUNCTION:
SSL_set_rfd 107 1_1_0 EXIST::FUNCTION:SOCK
SSL_SESSION_set_timeout 108 1_1_0 EXIST::FUNCTION:
SSL_set_psk_client_callback 109 1_1_0 EXIST::FUNCTION:PSK
SSL_get_client_random 110 1_1_0 EXIST::FUNCTION:
TLS_method 111 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_clear_flags 112 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
TLSv1_client_method 113 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_CIPHER_get_bits 114 1_1_0 EXIST::FUNCTION:
SSL_test_functions 115 1_1_0 EXIST::FUNCTION:UNIT_TEST
SSL_get_SSL_CTX 116 1_1_0 EXIST::FUNCTION:
SSL_get_session 117 1_1_0 EXIST::FUNCTION:
SSL_CTX_callback_ctrl 118 1_1_0 EXIST::FUNCTION:
SSL_get_finished 119 1_1_0 EXIST::FUNCTION:
SSL_add_dir_cert_subjects_to_stack 120 1_1_0 EXIST::FUNCTION:
SSL_get_state 121 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_finish 122 1_1_0 EXIST::FUNCTION:
SSL_CTX_add_server_custom_ext 123 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get_ex_data 124 1_1_0 EXIST::FUNCTION:
SSL_get_srp_username 125 1_1_0 EXIST::FUNCTION:SRP
SSL_CTX_set_purpose 126 1_1_0 EXIST::FUNCTION:
SSL_clear 127 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_cert_store 128 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
TLSv1_2_method 129 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_2_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_session_reused 130 1_1_0 EXIST::FUNCTION:
SSL_free 131 1_1_0 EXIST::FUNCTION:
BIO_ssl_shutdown 132 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_client_CA_list 133 1_1_0 EXIST::FUNCTION:
SSL_CTX_sessions 134 1_1_0 EXIST::FUNCTION:
SSL_get_options 135 1_1_0 EXIST::FUNCTION:
SSL_set_verify_depth 136 1_1_0 EXIST::FUNCTION:
SSL_get_error 137 1_1_0 EXIST::FUNCTION:
SSL_get_servername 138 1_1_0 EXIST::FUNCTION:
SSL_get_version 139 1_1_0 EXIST::FUNCTION:
SSL_state_string 140 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get_timeout 141 1_1_0 EXIST::FUNCTION:
SSL_CTX_sess_get_remove_cb 142 1_1_0 EXIST::FUNCTION:
SSL_get_current_cipher 143 1_1_0 EXIST::FUNCTION:
SSL_up_ref 144 1_1_0 EXIST::FUNCTION:
SSL_export_keying_material 145 1_1_0 EXIST::FUNCTION:
SSL_callback_ctrl 146 1_1_0 EXIST::FUNCTION:
SSL_set_security_callback 147 1_1_0 EXIST::FUNCTION:
SSL_SRP_CTX_init 148 1_1_0 EXIST::FUNCTION:SRP
ERR_load_SSL_strings 149 1_1_0 EXIST::FUNCTION:
SSL_CTX_SRP_CTX_init 150 1_1_0 EXIST::FUNCTION:SRP
SSL_SESSION_set_time 151 1_1_0 EXIST::FUNCTION:
i2d_SSL_SESSION 152 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get_master_key 153 1_1_0 EXIST::FUNCTION:
SSL_COMP_get_compression_methods 154 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_alpn_select_cb 155 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_tmp_dh_callback 156 1_1_0 EXIST::FUNCTION:DH
SSL_CTX_get_default_passwd_cb 157 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
TLSv1_server_method 158 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
DTLS_server_method 159 1_1_0 EXIST::FUNCTION:
Simplify and rename SSL_set_rbio() and SSL_set_wbio() SSL_set_rbio() and SSL_set_wbio() are new functions in 1.1.0 and really should be called SSL_set0_rbio() and SSL_set0_wbio(). The old implementation was not consistent with what "set0" means though as there were special cases around what happens if the rbio and wbio are the same. We were only ever taking one reference on the BIO, and checking everywhere whether the rbio and wbio are the same so as not to double free. A better approach is to rename the functions to SSL_set0_rbio() and SSL_set0_wbio(). If an existing BIO is present it is *always* freed regardless of whether the rbio and wbio are the same or not. It is therefore the callers responsibility to ensure that a reference is taken for *each* usage, i.e. one for the rbio and one for the wbio. The legacy function SSL_set_bio() takes both the rbio and wbio in one go and sets them both. We can wrap up the old behaviour in the implementation of that function, i.e. previously if the rbio and wbio are the same in the call to this function then the caller only needed to ensure one reference was passed. This behaviour is retained by internally upping the ref count. This commit was inspired by BoringSSL commit f715c423224. RT#4572 Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-21 11:17:29 +00:00
SSL_set0_rbio 160 1_1_0 EXIST::FUNCTION:
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_CTX_set_options 161 1_1_0 EXIST::FUNCTION:
SSL_set_msg_callback 162 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_free 163 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_ssl_method 164 1_1_0 EXIST::FUNCTION:
SSL_get_server_random 165 1_1_0 EXIST::FUNCTION:
SSL_set_shutdown 166 1_1_0 EXIST::FUNCTION:
SSL_CTX_add_client_CA 167 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
TLSv1_1_server_method 168 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_1_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
PEM_write_bio_SSL_SESSION 169 1_1_0 EXIST::FUNCTION:
SSL_write 170 1_1_0 EXIST::FUNCTION:
SSL_set1_host 171 1_1_0 EXIST::FUNCTION:
SSL_use_RSAPrivateKey_file 172 1_1_0 EXIST::FUNCTION:RSA
SSL_CTX_get_info_callback 173 1_1_0 EXIST::FUNCTION:
SSL_get0_peername 174 1_1_0 EXIST::FUNCTION:
SSL_set_srp_server_param 175 1_1_0 EXIST::FUNCTION:SRP
TLS_server_method 176 1_1_0 EXIST::FUNCTION:
SSL_get_psk_identity_hint 177 1_1_0 EXIST::FUNCTION:PSK
SSL_set_session 178 1_1_0 EXIST::FUNCTION:
SSL_get0_param 179 1_1_0 EXIST::FUNCTION:
SSL_set_default_passwd_cb 180 1_1_0 EXIST::FUNCTION:
SSL_get_read_ahead 181 1_1_0 EXIST::FUNCTION:
SSL_dup_CA_list 182 1_1_0 EXIST::FUNCTION:
SSL_get_verify_callback 183 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_default_passwd_cb 184 1_1_0 EXIST::FUNCTION:
SSL_get_servername_type 185 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
TLSv1_2_client_method 186 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_2_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_add_client_CA 187 1_1_0 EXIST::FUNCTION:
SSL_CTX_get0_security_ex_data 188 1_1_0 EXIST::FUNCTION:
SSL_get_ex_data 189 1_1_0 EXIST::FUNCTION:
SSL_CTX_flush_sessions 190 1_1_0 EXIST::FUNCTION:
SSL_use_PrivateKey 191 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
DTLSv1_client_method 192 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_CTX_dane_mtype_set 193 1_1_0 EXIST::FUNCTION:
SSL_get_wfd 194 1_1_0 EXIST::FUNCTION:
SSL_get_ssl_method 195 1_1_0 EXIST::FUNCTION:
SSL_set_verify_result 196 1_1_0 EXIST::FUNCTION:
SSL_use_RSAPrivateKey_ASN1 197 1_1_0 EXIST::FUNCTION:RSA
SSL_CIPHER_get_name 198 1_1_0 EXIST::FUNCTION:
OPENSSL_init_ssl 199 1_1_0 EXIST::FUNCTION:
SSL_dup 200 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_serverinfo 201 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_serverinfo_file 202 1_1_0 EXIST::FUNCTION:
SSL_set_options 203 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_default_verify_dir 204 1_1_0 EXIST::FUNCTION:
SSL_do_handshake 205 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_ex_data 206 1_1_0 EXIST::FUNCTION:
SSL_is_init_finished 207 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_default_verify_file 208 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
SSLv3_method 209 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SSL3_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_CTX_set_cookie_generate_cb 210 1_1_0 EXIST::FUNCTION:
SSL_certs_clear 211 1_1_0 EXIST::FUNCTION:
SSL_set_connect_state 212 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_ex_data 213 1_1_0 EXIST::FUNCTION:
SSL_rstate_string 214 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get0_peer 215 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get_compress_id 216 1_1_0 EXIST::FUNCTION:
SSL_get_peer_cert_chain 217 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_cert_cb 218 1_1_0 EXIST::FUNCTION:
PEM_read_bio_SSL_SESSION 219 1_1_0 EXIST::FUNCTION:
SSL_set_info_callback 220 1_1_0 EXIST::FUNCTION:
SSL_CTX_sess_set_new_cb 221 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_security_level 222 1_1_0 EXIST::FUNCTION:
SSL_CTX_ctrl 223 1_1_0 EXIST::FUNCTION:
SSL_set_alpn_protos 224 1_1_0 EXIST::FUNCTION:
SSL_set_ex_data 225 1_1_0 EXIST::FUNCTION:
SSL_rstate_string_long 226 1_1_0 EXIST::FUNCTION:
SSL_ctrl 227 1_1_0 EXIST::FUNCTION:
SSL_get_current_compression 228 1_1_0 EXIST::FUNCTION:
SSL_SESSION_has_ticket 229 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_cert_verify_callback 230 1_1_0 EXIST::FUNCTION:
SSL_set_session_secret_cb 231 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_client_cert_engine 232 1_1_0 EXIST::FUNCTION:ENGINE
SSL_CTX_get0_param 233 1_1_0 EXIST::FUNCTION:
SSL_CTX_set1_param 234 1_1_0 EXIST::FUNCTION:
SSL_get_certificate 235 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
DTLSv1_server_method 236 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_set_fd 237 1_1_0 EXIST::FUNCTION:SOCK
SSL_use_certificate 238 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
DTLSv1_method 239 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_METHOD
Simplify and rename SSL_set_rbio() and SSL_set_wbio() SSL_set_rbio() and SSL_set_wbio() are new functions in 1.1.0 and really should be called SSL_set0_rbio() and SSL_set0_wbio(). The old implementation was not consistent with what "set0" means though as there were special cases around what happens if the rbio and wbio are the same. We were only ever taking one reference on the BIO, and checking everywhere whether the rbio and wbio are the same so as not to double free. A better approach is to rename the functions to SSL_set0_rbio() and SSL_set0_wbio(). If an existing BIO is present it is *always* freed regardless of whether the rbio and wbio are the same or not. It is therefore the callers responsibility to ensure that a reference is taken for *each* usage, i.e. one for the rbio and one for the wbio. The legacy function SSL_set_bio() takes both the rbio and wbio in one go and sets them both. We can wrap up the old behaviour in the implementation of that function, i.e. previously if the rbio and wbio are the same in the call to this function then the caller only needed to ensure one reference was passed. This behaviour is retained by internally upping the ref count. This commit was inspired by BoringSSL commit f715c423224. RT#4572 Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-21 11:17:29 +00:00
SSL_set0_wbio 240 1_1_0 EXIST::FUNCTION:
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_read 241 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_options 242 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_ssl_version 243 1_1_0 EXIST::FUNCTION:
SSL_set_SSL_CTX 244 1_1_0 EXIST::FUNCTION:
SSL_renegotiate_abbreviated 245 1_1_0 EXIST::FUNCTION:
SSL_get_verify_mode 246 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_get_id 247 1_1_0 EXIST::FUNCTION:
SSL_SESSION_print_keylog 248 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_psk_client_callback 249 1_1_0 EXIST::FUNCTION:PSK
SSL_SESSION_get_time 250 1_1_0 EXIST::FUNCTION:
SSL_set_debug 251 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0
SSL_get_security_level 252 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_description 253 1_1_0 EXIST::FUNCTION:
SSL_set_default_passwd_cb_userdata 254 1_1_0 EXIST::FUNCTION:
SSL_get_srp_userinfo 255 1_1_0 EXIST::FUNCTION:SRP
SSL_extension_supported 256 1_1_0 EXIST::FUNCTION:
SSL_dane_tlsa_add 257 1_1_0 EXIST::FUNCTION:
SSL_srp_server_param_with_username 258 1_1_0 EXIST::FUNCTION:SRP
SSL_CIPHER_get_version 259 1_1_0 EXIST::FUNCTION:
SSL_get0_verified_chain 260 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_find 261 1_1_0 EXIST::FUNCTION:
SSL_get_rbio 262 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_set_ssl 263 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_verify_depth 264 1_1_0 EXIST::FUNCTION:
SSL_get_ciphers 265 1_1_0 EXIST::FUNCTION:
SSL_CTX_config 266 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_set_ssl_ctx 267 1_1_0 EXIST::FUNCTION:
SSL_CONF_cmd 268 1_1_0 EXIST::FUNCTION:
SSL_add_ssl_module 269 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_verify_callback 270 1_1_0 EXIST::FUNCTION:
SSL_set1_param 271 1_1_0 EXIST::FUNCTION:
SSL_use_certificate_file 272 1_1_0 EXIST::FUNCTION:
SSL_get_changed_async_fds 273 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_client_cert_cb 274 1_1_0 EXIST::FUNCTION:
DTLS_client_method 275 1_1_0 EXIST::FUNCTION:
SSL_set_trust 276 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_security_callback 277 1_1_0 EXIST::FUNCTION:
SSL_CTX_clear_options 278 1_1_0 EXIST::FUNCTION:
SSL_check_chain 279 1_1_0 EXIST::FUNCTION:
SSL_CTX_sess_set_remove_cb 280 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_info_callback 281 1_1_0 EXIST::FUNCTION:
SSL_pending 282 1_1_0 EXIST::FUNCTION:
SSL_set_bio 283 1_1_0 EXIST::FUNCTION:
BIO_new_ssl_connect 284 1_1_0 EXIST::FUNCTION:
SSL_waiting_for_async 285 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_srp_strength 286 1_1_0 EXIST::FUNCTION:SRP
SSL_CTX_get_quiet_shutdown 287 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_certificate_chain_file 288 1_1_0 EXIST::FUNCTION:
SSL_CTX_dane_enable 289 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_new 290 1_1_0 EXIST::FUNCTION:
SSL_get0_alpn_selected 291 1_1_0 EXIST::FUNCTION:
SSL_get0_next_proto_negotiated 292 1_1_0 EXIST::FUNCTION:NEXTPROTONEG
SSL_set0_security_ex_data 293 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_tlsext_use_srtp 294 1_1_0 EXIST::FUNCTION:SRTP
SSL_COMP_set0_compression_methods 295 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_not_resumable_session_callback 296 1_1_0 EXIST::FUNCTION:
SSL_accept 297 1_1_0 EXIST::FUNCTION:
SSL_use_psk_identity_hint 298 1_1_0 EXIST::FUNCTION:PSK
SSL_trace 299 1_1_0 EXIST::FUNCTION:SSL_TRACE
DTLS_method 300 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_srp_verify_param_callback 301 1_1_0 EXIST::FUNCTION:SRP
SSL_CTX_set_timeout 302 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_security_level 303 1_1_0 EXIST::FUNCTION:
TLS_client_method 304 1_1_0 EXIST::FUNCTION:
SSL_set_quiet_shutdown 305 1_1_0 EXIST::FUNCTION:
SSL_CTX_up_ref 306 1_1_0 EXIST::FUNCTION:
SSL_check_private_key 307 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_quiet_shutdown 308 1_1_0 EXIST::FUNCTION:
SSL_select_next_proto 309 1_1_0 EXIST::FUNCTION:
SSL_load_client_CA_file 310 1_1_0 EXIST::FUNCTION:
SSL_set_srp_server_param_pw 311 1_1_0 EXIST::FUNCTION:SRP
SSL_renegotiate_pending 312 1_1_0 EXIST::FUNCTION:
SSL_CTX_new 313 1_1_0 EXIST::FUNCTION:
SSL_set_session_ticket_ext_cb 314 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_timeout 315 1_1_0 EXIST::FUNCTION:
SSL_use_certificate_chain_file 316 1_1_0 EXIST::FUNCTION:
SSL_set_not_resumable_session_callback 317 1_1_0 EXIST::FUNCTION:
SSL_CTX_SRP_CTX_free 318 1_1_0 EXIST::FUNCTION:SRP
SSL_get_current_expansion 319 1_1_0 EXIST::FUNCTION:
SSL_clear_options 320 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_PrivateKey 321 1_1_0 EXIST::FUNCTION:
SSL_get_info_callback 322 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_psk_identity_hint 323 1_1_0 EXIST::FUNCTION:PSK
SSL_CTX_use_RSAPrivateKey_ASN1 324 1_1_0 EXIST::FUNCTION:RSA
SSL_CTX_use_PrivateKey_ASN1 325 1_1_0 EXIST::FUNCTION:
SSL_CTX_get0_privatekey 326 1_1_0 EXIST::FUNCTION:
BIO_f_ssl 327 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
SSLv3_server_method 328 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SSL3_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_SESSION_free 329 1_1_0 EXIST::FUNCTION:
SSL_get_shutdown 330 1_1_0 EXIST::FUNCTION:
SSL_get_peer_finished 331 1_1_0 EXIST::FUNCTION:
SSL_set_tlsext_use_srtp 332 1_1_0 EXIST::FUNCTION:SRTP
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
TLSv1_method 333 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_set_psk_server_callback 334 1_1_0 EXIST::FUNCTION:PSK
SSL_CTX_set_alpn_protos 335 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_default_verify_paths 336 1_1_0 EXIST::FUNCTION:
SSL_CTX_sess_set_get_cb 337 1_1_0 EXIST::FUNCTION:
SSL_add_file_cert_subjects_to_stack 338 1_1_0 EXIST::FUNCTION:
SSL_get_default_passwd_cb_userdata 339 1_1_0 EXIST::FUNCTION:
SSL_get_security_callback 340 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_srp_username 341 1_1_0 EXIST::FUNCTION:SRP
SSL_COMP_get_name 342 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_default_passwd_cb_userdata 343 1_1_0 EXIST::FUNCTION:
SSL_set_verify 344 1_1_0 EXIST::FUNCTION:
SSL_in_before 345 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_get_digest_nid 346 1_1_0 EXIST::FUNCTION:
SSL_CTX_add_client_custom_ext 347 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_certificate 348 1_1_0 EXIST::FUNCTION:
SSL_set_cipher_list 349 1_1_0 EXIST::FUNCTION:
SSL_get_wbio 350 1_1_0 EXIST::FUNCTION:
SSL_set_hostflags 351 1_1_0 EXIST::FUNCTION:
SSL_alert_desc_string_long 352 1_1_0 EXIST::FUNCTION:
SSL_get_default_timeout 353 1_1_0 EXIST::FUNCTION:
SSL_set_session_id_context 354 1_1_0 EXIST::FUNCTION:
SSL_new 355 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
TLSv1_1_method 356 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_1_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_CTX_get_cert_store 357 1_1_0 EXIST::FUNCTION:
SSL_CTX_load_verify_locations 358 1_1_0 EXIST::FUNCTION:
SSL_SESSION_print_fp 359 1_1_0 EXIST::FUNCTION:STDIO
SSL_get0_dane_tlsa 360 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_generate_session_id 361 1_1_0 EXIST::FUNCTION:
SSL_alert_type_string_long 362 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_set1_prefix 363 1_1_0 EXIST::FUNCTION:
SSL_in_init 364 1_1_0 EXIST::FUNCTION:
BIO_new_ssl 365 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_client_cert_cb 366 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_certificate_ASN1 367 1_1_0 EXIST::FUNCTION:
SSL_set_client_CA_list 368 1_1_0 EXIST::FUNCTION:
SSL_CTX_free 369 1_1_0 EXIST::FUNCTION:
SSL_get_default_passwd_cb 370 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get_id 371 1_1_0 EXIST::FUNCTION:
SSL_SESSION_set1_id_context 372 1_1_0 EXIST::FUNCTION:
SSL_is_server 373 1_1_0 EXIST::FUNCTION:
SSL_alert_type_string 374 1_1_0 EXIST::FUNCTION:
Run make update Reviewed-by: Rich Salz <rsalz@openssl.org> MR: #2296
2016-03-09 21:54:16 +00:00
DTLSv1_2_client_method 375 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_2_METHOD
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_CTX_set_ctlog_list_file 376 1_1_0 EXIST::FUNCTION:CT
SSL_set_ct_validation_callback 377 1_1_0 EXIST::FUNCTION:CT
SSL_CTX_set_default_ctlog_list_file 378 1_1_0 EXIST::FUNCTION:CT
SSL_CTX_has_client_custom_ext 379 1_1_0 EXIST::FUNCTION:
make update Signed-off-by: Rob Percival <robpercival@google.com> Reviewed-by: Emilia Käsper <emilia@openssl.org>
2016-04-07 18:19:16 +00:00
SSL_ct_is_enabled 380 1_1_0 EXIST::FUNCTION:CT
New ordinal files, recreated from scratch Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-03 11:42:37 +00:00
SSL_get0_peer_scts 381 1_1_0 EXIST::FUNCTION:CT
SSL_CTX_set_ct_validation_callback 382 1_1_0 EXIST::FUNCTION:CT
make update Signed-off-by: Rob Percival <robpercival@google.com> Reviewed-by: Emilia Käsper <emilia@openssl.org>
2016-04-07 18:19:16 +00:00
SSL_CTX_ct_is_enabled 383 1_1_0 EXIST::FUNCTION:CT
Add an ability to set the SSL read buffer size This capability is required for read pipelining. We will only read in as many records as will fit in the read buffer (and the network can provide in one go). The bigger the buffer the more records we can process in parallel. Reviewed-by: Tim Hudson <tjh@openssl.org>
2016-01-13 14:20:25 +00:00
SSL_set_default_read_buffer_len 384 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_default_read_buffer_len 385 1_1_0 EXIST::FUNCTION:
Add an SSL_has_pending() function This is similar to SSL_pending() but just returns a 1 if there is data pending in the internal OpenSSL buffers or 0 otherwise (as opposed to SSL_pending() which returns the number of bytes available). Unlike SSL_pending() this will work even if "read_ahead" is set (which is the case if you are using read pipelining, or if you are doing DTLS). A 1 return value means that we have unprocessed data. It does *not* necessarily indicate that there will be application data returned from a call to SSL_read(). The unprocessed data may not be application data or there could be errors when we attempt to parse the records. Reviewed-by: Tim Hudson <tjh@openssl.org>
2016-02-12 12:03:58 +00:00
SSL_has_pending 386 1_1_0 EXIST::FUNCTION:
Add cipher query functions Add functions to determine authentication, key-exchange, FIPS and AEAD. Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-05 14:47:46 +00:00
SSL_CIPHER_get_auth_nid 387 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_get_kx_nid 388 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_is_aead 389 1_1_0 EXIST::FUNCTION:
Convert CRYPTO_LOCK_SSL_* to new multi-threading API Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-02-29 17:26:07 +00:00
SSL_SESSION_up_ref 390 1_1_0 EXIST::FUNCTION:
check reviewer --reviewer=emilia Remove 'log' field from SCT and related accessors In order to still have access to an SCT's CTLOG when calling SCT_print, SSL_CTX_get0_ctlog_store has been added. Improved documentation for some CT functions in openssl/ssl.h. Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-10 18:17:23 +00:00
SSL_CTX_set0_ctlog_store 391 1_1_0 EXIST::FUNCTION:CT
SSL_CTX_get0_ctlog_store 392 1_1_0 EXIST::FUNCTION:CT
make update Signed-off-by: Rob Percival <robpercival@google.com> Reviewed-by: Emilia Käsper <emilia@openssl.org>
2016-04-07 18:19:16 +00:00
SSL_enable_ct 393 1_1_0 EXIST::FUNCTION:CT
SSL_CTX_enable_ct 394 1_1_0 EXIST::FUNCTION:CT
Cleanup libcrypto.num and make update Reviewed-by: Matt Caswell <matt@openssl.org>
2016-04-13 11:57:46 +00:00
SSL_CTX_get_ciphers 395 1_1_0 EXIST::FUNCTION:
Add SSL_SESSION_get0_hostname() Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-04-11 14:08:00 +00:00
SSL_SESSION_get0_hostname 396 1_1_0 EXIST::FUNCTION:
Add SSL_client_version() getter function Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
2016-05-09 11:58:01 +00:00
SSL_client_version 397 1_1_0 EXIST::FUNCTION:
make update Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-05-31 22:03:54 +00:00
SSL_SESSION_get_protocol_version 398 1_1_0 EXIST::FUNCTION:
Add some accessor API's GH1098: Add X509_get_pathlen() (and a test) GH1097: Add SSL_is_dtls() function. Documented. Reviewed-by: Matt Caswell <matt@openssl.org>
2016-06-08 15:37:06 +00:00
SSL_is_dtls 399 1_1_0 EXIST::FUNCTION:
Make update Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-12 15:10:05 +00:00
SSL_CTX_dane_set_flags 400 1_1_0 EXIST::FUNCTION:
SSL_dane_set_flags 401 1_1_0 EXIST::FUNCTION:
SSL_CTX_dane_clear_flags 402 1_1_0 EXIST::FUNCTION:
SSL_dane_clear_flags 403 1_1_0 EXIST::FUNCTION:
GH1446: Add SSL_SESSION_get0_cipher Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1451)
2016-08-12 19:02:00 +00:00
SSL_SESSION_get0_cipher 404 1_1_0 EXIST::FUNCTION:
Add missing session id and tlsext_status accessors * SSL_SESSION_set1_id() * SSL_SESSION_get0_id_context() * SSL_CTX_get_tlsext_status_cb() * SSL_CTX_get_tlsext_status_arg() Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
2016-08-06 10:54:29 +00:00
SSL_SESSION_get0_id_context 405 1_1_0 EXIST::FUNCTION:
SSL_SESSION_set1_id 406 1_1_0 EXIST::FUNCTION:
Add SSL_CTX_set1_cert_store() For convenience, combine getting a new ref for the new SSL_CTX with assigning the store and freeing the old one. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1755)
2015-03-31 20:20:03 +00:00
SSL_CTX_set1_cert_store 407 1_1_1 EXIST::FUNCTION:
Add DTLS_get_data_mtu() function We add ssl_cipher_get_overhead() as an internal function, to avoid having too much ciphersuite-specific knowledge in DTLS_get_data_mtu() itself. It's going to need adjustment for TLSv1.3... but then again, so is fairly much *all* of the SSL_CIPHER handling. This bit is in the noise. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
2016-10-05 23:44:59 +00:00
DTLS_get_data_mtu 408 1_1_1 EXIST::FUNCTION:
Further libssl size_t-ify of reading Writing still to be done Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-09-06 11:05:25 +00:00
SSL_read_ex 409 1_1_1 EXIST::FUNCTION:
SSL_peek_ex 410 1_1_1 EXIST::FUNCTION:
Convert libssl writing for size_t Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-09-07 10:34:39 +00:00
SSL_write_ex 411 1_1_1 EXIST::FUNCTION:
Remove a hack from ssl_test_old ssl_test_old was reaching inside the SSL structure and changing the internal BIO values. This is completely unneccessary, and was causing an abort in the test when enabling TLSv1.3. I also removed the need for ssl_test_old to include ssl_locl.h. This required the addition of some missing accessors for SSL_COMP name and id fields. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-11-15 16:31:26 +00:00
SSL_COMP_get_id 412 1_1_0d EXIST::FUNCTION:
SSL_COMP_get0_name 413 1_1_0d EXIST::FUNCTION:
Add support for key logging callbacks. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1646)
2017-01-20 16:22:30 +00:00
SSL_CTX_set_keylog_callback 414 1_1_1 EXIST::FUNCTION:
SSL_CTX_get_keylog_callback 415 1_1_1 EXIST::FUNCTION:
make update Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2301)
2017-01-27 04:33:04 +00:00
SSL_get_peer_signature_type_nid 416 1_1_1 EXIST::FUNCTION:
Provide a function to send a KeyUpdate message This implements the server side KeyUpdate sending capability as well. Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2609)
2017-02-08 09:15:22 +00:00
SSL_key_update 417 1_1_1 EXIST::FUNCTION:
Add a SSL_get_key_update_type() function Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2609)
2017-02-09 15:05:46 +00:00
SSL_get_key_update_type 418 1_1_1 EXIST::FUNCTION:
Export SSL_bytes_to_cipher_list() Move ssl_bytes_to_cipher_list() to ssl_lib.c and create a public wrapper around it. This lets application early callbacks easily get SSL_CIPHER objects from the raw ciphers bytes without having to reimplement the parsing code. In particular, they do not need to know the details of the sslv2 format ClientHello's ciphersuite specifications. Document the new public function, including the arguably buggy behavior of modifying the supplied SSL object. On the face of it, such a function should be able to be pure, just a direct translation of wire octets to internal data structures. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2279)
2017-01-30 17:24:17 +00:00
SSL_bytes_to_cipher_list 419 1_1_1 EXIST::FUNCTION:
Rename SSL_CTX_set_early_cb to SSL_CTX_set_client_hello_cb. "Early callback" is a little ambiguous now that early data exists. Perhaps "ClientHello callback"? Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/4349)
2017-09-07 22:39:40 +00:00
SSL_client_hello_get0_compression_methods 420 1_1_1 EXIST::FUNCTION:
SSL_client_hello_get0_ciphers 421 1_1_1 EXIST::FUNCTION:
SSL_client_hello_get0_ext 422 1_1_1 EXIST::FUNCTION:
SSL_client_hello_get0_session_id 423 1_1_1 EXIST::FUNCTION:
SSL_client_hello_get0_random 424 1_1_1 EXIST::FUNCTION:
SSL_CTX_set_client_hello_cb 425 1_1_1 EXIST::FUNCTION:
SSL_client_hello_get0_legacy_version 426 1_1_1 EXIST::FUNCTION:
SSL_client_hello_isv2 427 1_1_1 EXIST::FUNCTION:
Construct the ticket_early_data_info extension Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2737)
2017-02-17 16:52:12 +00:00
SSL_set_max_early_data 428 1_1_1 EXIST::FUNCTION:
SSL_CTX_set_max_early_data 429 1_1_1 EXIST::FUNCTION:
SSL_get_max_early_data 430 1_1_1 EXIST::FUNCTION:
SSL_CTX_get_max_early_data 431 1_1_1 EXIST::FUNCTION:
Rename SSL_write_early() to SSL_write_early_data() This is for consistency with the rest of the API where all the functions are called *early_data*. Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2737)
2017-03-02 15:05:36 +00:00
SSL_write_early_data 432 1_1_1 EXIST::FUNCTION:
Rename SSL_read_early() to SSL_read_early_data() This is for consistency with the rest of the API where all the functions are called *early_data*. Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2737)
2017-03-02 14:42:55 +00:00
SSL_read_early_data 433 1_1_1 EXIST::FUNCTION:
Make SSL_write_early_finish() an internal only function Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2737)
2017-02-27 20:54:39 +00:00
SSL_get_early_data_status 434 1_1_1 EXIST::FUNCTION:
SSL_SESSION_get_max_early_data 435 1_1_1 EXIST::FUNCTION:
Rename SSL[_CTX]_add1_CA_list -> SSL[_CTX]_add1_to_CA_list They add a single item, so the names give a false impression of what they do, making them hard to remember. Better to give them a somewhat better name. Fixes #6930 Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/6931)
2018-08-13 05:11:47 +00:00
SSL_add1_to_CA_list 436 1_1_1 EXIST::FUNCTION:
update ordinals Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3015)
2017-03-31 23:40:15 +00:00
SSL_set0_CA_list 437 1_1_1 EXIST::FUNCTION:
SSL_CTX_set0_CA_list 438 1_1_1 EXIST::FUNCTION:
SSL_get0_CA_list 439 1_1_1 EXIST::FUNCTION:
SSL_get0_peer_CA_list 440 1_1_1 EXIST::FUNCTION:
Rename SSL[_CTX]_add1_CA_list -> SSL[_CTX]_add1_to_CA_list They add a single item, so the names give a false impression of what they do, making them hard to remember. Better to give them a somewhat better name. Fixes #6930 Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/6931)
2018-08-13 05:11:47 +00:00
SSL_CTX_add1_to_CA_list 441 1_1_1 EXIST::FUNCTION:
update ordinals Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3015)
2017-03-31 23:40:15 +00:00
SSL_CTX_get0_CA_list 442 1_1_1 EXIST::FUNCTION:
Implement a new custom extensions API The old custom extensions API was not TLSv1.3 aware. Extensions are used extensively in TLSv1.3 and they can appear in many different types of messages. Therefore we need a new API to be able to cope with that. Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3139)
2017-04-05 10:59:23 +00:00
SSL_CTX_add_custom_ext 443 1_1_1 EXIST::FUNCTION:
Add support for SSL_SESSION_is_resumable() Provide a way to test whether the SSL_SESSION object can be used to resume a sesion or not. Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3008)
2017-03-21 13:50:31 +00:00
SSL_SESSION_is_resumable 444 1_1_1 EXIST::FUNCTION:
TLS1.3 Padding Add padding callback for application control Standard block_size callback Documentation and tests included Configuration file/s_client/s_srver option Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3130)
2017-04-05 16:35:25 +00:00
SSL_CTX_set_record_padding_callback 445 1_1_1 EXIST::FUNCTION:
SSL_set_record_padding_callback 446 1_1_1 EXIST::FUNCTION:
SSL_CTX_set_block_padding 447 1_1_1 EXIST::FUNCTION:
SSL_CTX_get_record_padding_callback_arg 448 1_1_1 EXIST::FUNCTION:
SSL_get_record_padding_callback_arg 449 1_1_1 EXIST::FUNCTION:
SSL_set_block_padding 450 1_1_1 EXIST::FUNCTION:
SSL_set_record_padding_callback_arg 451 1_1_1 EXIST::FUNCTION:
SSL_CTX_set_record_padding_callback_arg 452 1_1_1 EXIST::FUNCTION:
Extend the SERVERINFO file format to include an extensions context This enables us to know what messages the extensions are relevant for in TLSv1.3. The new file format is not compatible with the previous one so we call it SERVERINFOV2. Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3298)
2017-04-10 15:13:20 +00:00
SSL_CTX_use_serverinfo_ex 453 1_1_1 EXIST::FUNCTION:
Rename SSL_CTX_set_early_cb to SSL_CTX_set_client_hello_cb. "Early callback" is a little ambiguous now that early data exists. Perhaps "ClientHello callback"? Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/4349)
2017-09-07 22:39:40 +00:00
SSL_client_hello_get1_extensions_present 454 1_1_1 EXIST::FUNCTION:
Add public API functions for setting TLSv1.3 PSK callbacks Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3670)
2017-06-12 14:59:00 +00:00
SSL_set_psk_find_session_callback 455 1_1_1 EXIST::FUNCTION:
SSL_set_psk_use_session_callback 456 1_1_1 EXIST::FUNCTION:
SSL_CTX_set_psk_use_session_callback 457 1_1_1 EXIST::FUNCTION:
SSL_CTX_set_psk_find_session_callback 458 1_1_1 EXIST::FUNCTION:
Add a function to get the handshake digest for an SSL_CIPHER Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3670)
2017-06-12 15:56:15 +00:00
SSL_CIPHER_get_handshake_digest 459 1_1_1 EXIST::FUNCTION:
Add SSL_SESSION_set1_master_key() Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3670)
2017-06-12 17:38:30 +00:00
SSL_SESSION_set1_master_key 460 1_1_1 EXIST::FUNCTION:
Add SSL_SESSION_set_cipher() Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3670)
2017-06-12 18:12:04 +00:00
SSL_SESSION_set_cipher 461 1_1_1 EXIST::FUNCTION:
Add SSL_SESSION_set_protocol_version() Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3670)
2017-06-12 18:40:11 +00:00
SSL_SESSION_set_protocol_version 462 1_1_1 EXIST::FUNCTION:
Support converting cipher name to RFC name and vice versa Fixes: issue #3747 make SSL_CIPHER_standard_name globally available and introduce a new function OPENSSL_cipher_name. A new option '-convert' is also added to 'openssl ciphers' app. Documentation and test cases are added. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/3859)
2017-06-29 19:06:19 +00:00
OPENSSL_cipher_name 463 1_1_1 EXIST::FUNCTION:
Add support to free/allocate SSL buffers OpenSSL already has the feature of SSL_MODE_RELEASE_BUFFERS that can be set to release the read or write buffers when data has finished reading or writing. OpenSSL will automatically re-allocate the buffers as needed. This can be quite aggressive in terms of memory allocation. This provides a manual mechanism. SSL_free_buffers() will free the data buffers if there's no pending data. SSL_alloc_buffers() will realloc them; but this function is not strictly necessary, as it's still done automatically in the state machine. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2240)
2017-01-13 16:00:26 +00:00
SSL_alloc_buffers 464 1_1_1 EXIST::FUNCTION:
SSL_free_buffers 465 1_1_1 EXIST::FUNCTION:
Add an SSL_SESSION_dup() function Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/4072)
2017-08-02 12:32:56 +00:00
SSL_SESSION_dup 466 1_1_1 EXIST::FUNCTION:
Add SSL_get_pending_cipher() The existing function SSL_get_current_cipher() queries the current session for the ciphersuite in use, but there is no way for application code to determine what ciphersuite has been negotiated and will be used in the future, prior to ChangeCipherState (or the TLS 1.3 equivalent) causing the new cipher to take effect and become visible in the session information. Expose this information to appropriate application callbacks to use during the handshake. The name SSL_get_pending_cipher() was chosen for compatibility with BoringSSL's routine of that name. Improve the note on macro implementations in SSL_get_current_cipher.pod while here. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4070)
2017-08-01 20:28:14 +00:00
SSL_get_pending_cipher 467 1_1_1 EXIST::FUNCTION:
Introduce SSL_CIPHER_get_protocol_id The returned ID matches with what IANA specifies (or goes on the wire anyway, IANA notwithstanding). Doc is added. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/4107)
2017-08-22 16:37:10 +00:00
SSL_CIPHER_get_protocol_id 468 1_1_1 EXIST::FUNCTION:
Add SSL_SESSION_set_max_early_data() Reviewed-by: Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/3926)
2017-07-08 10:42:55 +00:00
SSL_SESSION_set_max_early_data 469 1_1_1 EXIST::FUNCTION:
Add functions for getting/setting SNI/ALPN info in SSL_SESSION Reviewed-by: Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/3926)
2017-08-03 09:13:31 +00:00
SSL_SESSION_set1_alpn_selected 470 1_1_1 EXIST::FUNCTION:
SSL_SESSION_set1_hostname 471 1_1_1 EXIST::FUNCTION:
SSL_SESSION_get0_alpn_selected 472 1_1_1 EXIST::FUNCTION:
add callback handler for setting DTLS timer interval Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de> (Merged from https://github.com/openssl/openssl/pull/4011)
2017-09-06 06:30:00 +00:00
DTLS_set_timer_cb 473 1_1_1 EXIST::FUNCTION:
Implement Maximum Fragment Length TLS extension. Based on patch from Tomasz Moń: https://groups.google.com/forum/#!topic/mailing.openssl.dev/fQxXvCg1uQY Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de> (Merged from https://github.com/openssl/openssl/pull/1008)
2017-11-05 16:46:48 +00:00
SSL_CTX_set_tlsext_max_fragment_length 474 1_1_1 EXIST::FUNCTION:
SSL_set_tlsext_max_fragment_length 475 1_1_1 EXIST::FUNCTION:
SSL_SESSION_get_max_fragment_length 476 1_1_1 EXIST::FUNCTION:
Add the SSL_stateless() function This enables sending and receiving of the TLSv1.3 cookie on the server side as appropriate. Reviewed-by: Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/4435)
2017-09-13 12:48:48 +00:00
SSL_stateless 477 1_1_1 EXIST::FUNCTION:
Add TLSv1.3 post-handshake authentication (PHA) Add SSL_verify_client_post_handshake() for servers to initiate PHA Add SSL_force_post_handshake_auth() for clients that don't have certificates initially configured, but use a certificate callback. Update SSL_CTX_set_verify()/SSL_set_verify() mode: * Add SSL_VERIFY_POST_HANDSHAKE to postpone client authentication until after the initial handshake. * Update SSL_VERIFY_CLIENT_ONCE now only sends out one CertRequest regardless of when the certificate authentication takes place; either initial handshake, re-negotiation, or post-handshake authentication. Add 'RequestPostHandshake' and 'RequirePostHandshake' SSL_CONF options that add the SSL_VERIFY_POST_HANDSHAKE to the 'Request' and 'Require' options Add support to s_client: * Enabled automatically when cert is configured * Can be forced enabled via -force_pha Add support to s_server: * Use 'c' to invoke PHA in s_server * Remove some dead code Update documentation Update unit tests: * Illegal use of PHA extension * TLSv1.3 certificate tests DTLS and TLS behave ever-so-slightly differently. So, when DTLS1.3 is implemented, it's PHA support state machine may need to be different. Add a TODO and a #error Update handshake context to deal with PHA. The handshake context for TLSv1.3 post-handshake auth is up through the ClientFinish message, plus the CertificateRequest message. Subsequent Certificate, CertificateVerify, and Finish messages are based on this handshake context (not the Certificate message per se, but it's included after the hash). KeyUpdate, NewSessionTicket, and prior Certificate Request messages are not included in post-handshake authentication. After the ClientFinished message is processed, save off the digest state for future post-handshake authentication. When post-handshake auth occurs, copy over the saved handshake context into the "main" handshake digest. This effectively discards the any KeyUpdate or NewSessionTicket messages and any prior post-handshake authentication. This, of course, assumes that the ID-22 did not mean to include any previous post-handshake authentication into the new handshake transcript. This is implied by section 4.4.1 that lists messages only up to the first ClientFinished. Reviewed-by: Ben Kaduk <kaduk@mit.edu> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4964)
2017-12-18 21:52:28 +00:00
SSL_verify_client_post_handshake 478 1_1_1 EXIST::FUNCTION:
Change Post Handshake auth so that it is opt-in Having post handshake auth automatically switched on breaks some applications written for TLSv1.2. This changes things so that an explicit function call is required for a client to indicate support for post-handshake auth. Fixes #6933. Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/6938)
2018-08-13 14:23:27 +00:00
SSL_set_post_handshake_auth 479 1_1_1 EXIST::FUNCTION:
Export keying material using early exporter master secret This commit adds SSL_export_keying_material_early() which exports keying material using early exporter master secret. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/5252)
2018-02-04 03:20:37 +00:00
SSL_export_keying_material_early 480 1_1_1 EXIST::FUNCTION:
Add SSL/SSL_CTX_use_cert_and_key() Add functions that will do the work of assigning certificate, privatekey and chain certs to an SSL or SSL_CTX. If no privatekey is given, use the publickey. This will permit the keys to pass validation for both ECDSA and RSA. If a private key has already been set for the certificate, it is discarded. A real private key can be set later. This is an all-or-nothing setting of these parameters. Unlike the SSL/SSL_CTX_use_certificate() and SSL/SSL_CTX_use_PrivateKey() functions, the existing cert or privatekey is not modified (i.e. parameters copied). This permits the existing cert/privatekey to be replaced. It replaces the sequence of: * SSL_use_certificate() * SSL_use_privatekey() * SSL_set1_chain() And may actually be faster, as multiple checks are consolidated. The private key can be NULL, if so an ENGINE module needs to contain the actual private key that is to be used. Note that ECDH (using the certificate's ECDSA key) ciphers do not work without the private key being present, based on how the private key is used in ECDH. ECDH does not offer PFS; ECDHE ciphers should be used instead. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/1130)
2015-12-28 14:13:20 +00:00
SSL_CTX_use_cert_and_key 481 1_1_1 EXIST::FUNCTION:
SSL_use_cert_and_key 482 1_1_1 EXIST::FUNCTION:
Session Ticket app data Adds application data into the encrypted session ticket Reviewed-by: Paul Dale <paul.dale@oracle.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3802)
2017-03-15 17:25:55 +00:00
SSL_SESSION_get0_ticket_appdata 483 1_1_1 EXIST::FUNCTION:
SSL_SESSION_set1_ticket_appdata 484 1_1_1 EXIST::FUNCTION:
SSL_CTX_set_session_ticket_cb 485 1_1_1 EXIST::FUNCTION:
Introduce SSL_CTX_set_stateless_cookie_{generate,verify}_cb These functions are similar to SSL_CTX_set_cookie_{generate,verify}_cb, but used for the application-controlled portion of TLS1.3 stateless handshake cookies rather than entire DTLSv1 cookies. Reviewed-by: Ben Kaduk <kaduk@mit.edu> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/5463)
2018-02-26 02:39:11 +00:00
SSL_CTX_set_stateless_cookie_generate_cb 486 1_1_1 EXIST::FUNCTION:
SSL_CTX_set_stateless_cookie_verify_cb 487 1_1_1 EXIST::FUNCTION:
Split configuration of TLSv1.3 ciphers from older ciphers With the current mechanism, old cipher strings that used to work in 1.1.0, may inadvertently disable all TLSv1.3 ciphersuites causing connections to fail. This is confusing for users. In reality TLSv1.3 are quite different to older ciphers. They are much simpler and there are only a small number of them so, arguably, they don't need the same level of control that the older ciphers have. This change splits the configuration of TLSv1.3 ciphers from older ones. By default the TLSv1.3 ciphers are on, so you cannot inadvertently disable them through your existing config. Fixes #5359 Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/5392)
2018-02-16 11:26:02 +00:00
SSL_CTX_set_ciphersuites 488 1_1_1 EXIST::FUNCTION:
SSL_set_ciphersuites 489 1_1_1 EXIST::FUNCTION:
Enable the ability to set the number of TLSv1.3 session tickets sent We send a session ticket automatically in TLSv1.3 at the end of the handshake. This commit provides the ability to set how many tickets should be sent. By default this is one. Fixes #4978 Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/5227)
2018-01-31 17:26:46 +00:00
SSL_set_num_tickets 490 1_1_1 EXIST::FUNCTION:
SSL_CTX_get_num_tickets 491 1_1_1 EXIST::FUNCTION:
SSL_get_num_tickets 492 1_1_1 EXIST::FUNCTION:
SSL_CTX_set_num_tickets 493 1_1_1 EXIST::FUNCTION:
Add setters to set the early_data callback Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/6469)
2018-06-07 14:14:36 +00:00
SSL_CTX_set_allow_early_data_cb 494 1_1_1 EXIST::FUNCTION:
SSL_set_allow_early_data_cb 495 1_1_1 EXIST::FUNCTION:
Introduce the recv_max_early_data setting Previoulsy we just had max_early_data which controlled both the value of max early_data that we advertise in tickets *and* the amount of early_data that we are willing to receive from clients. This doesn't work too well in the case where we want to reduce a previously advertised max_early_data value. In that case clients with old, stale tickets may attempt to send us more early data than we are willing to receive. Instead of rejecting the early data we abort the connection if that happens. To avoid this we introduce a new "recv_max_early_data" value. The old max_early_data becomes the value that is advertised in tickets while recv_max_early_data is the maximum we will tolerate from clients. Fixes #6647 Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/6655)
2018-07-05 13:40:39 +00:00
SSL_set_recv_max_early_data 496 1_1_1 EXIST::FUNCTION:
SSL_get_recv_max_early_data 497 1_1_1 EXIST::FUNCTION:
SSL_CTX_get_recv_max_early_data 498 1_1_1 EXIST::FUNCTION:
SSL_CTX_set_recv_max_early_data 499 1_1_1 EXIST::FUNCTION:
Add support for SSL_CTX_set_post_handshake_auth() We already have SSL_set_post_handshake_auth(). This just adds the SSL_CTX equivalent. Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/6938)
2018-08-13 14:53:42 +00:00
SSL_CTX_set_post_handshake_auth 500 1_1_1 EXIST::FUNCTION:
Reference in a new issue Copy permalink