OpenVPN
|
Go to the source code of this file.
Data Structures | |
struct | tls_cipher_name_pair |
Get a tls_cipher_name_pair containing OpenSSL and IANA names for supplied TLS cipher name. More... | |
Macros | |
#define | SSLAPI SSLAPI_OPENSSL |
#define | TLS_VER_BAD -1 |
Parse a TLS version specifier. More... | |
#define | TLS_VER_UNSPEC 0 /* default */ |
#define | TLS_VER_1_0 1 |
#define | TLS_VER_1_1 2 |
#define | TLS_VER_1_2 3 |
#define | TLS_VER_1_3 4 |
#define | EXPORT_KEY_DATA_LABEL "EXPORTER-OpenVPN-datakeys" |
#define | EXPORT_P2P_PEERID_LABEL "EXPORTER-OpenVPN-p2p-peerid" |
#define | EXPORT_DYNAMIC_TLS_CRYPT_LABEL "EXPORTER-OpenVPN-dynamic-tls-crypt" |
Functions | |
const tls_cipher_name_pair * | tls_get_cipher_name_pair (const char *cipher_name, size_t len) |
int | pem_password_callback (char *buf, int size, int rwflag, void *u) |
Callback to retrieve the user's password. More... | |
void | tls_init_lib (void) |
Perform any static initialisation necessary by the library. More... | |
void | tls_free_lib (void) |
Free any global SSL library-specific data structures. More... | |
void | tls_clear_error (void) |
Clear the underlying SSL library's error state. More... | |
int | tls_version_parse (const char *vstr, const char *extra) |
int | tls_version_max (void) |
Return the maximum TLS version (as a TLS_VER_x constant) supported by current SSL implementation. More... | |
void | tls_ctx_server_new (struct tls_root_ctx *ctx) |
Initialise a library-specific TLS context for a server. More... | |
void | tls_ctx_client_new (struct tls_root_ctx *ctx) |
Initialises a library-specific TLS context for a client. More... | |
void | tls_ctx_free (struct tls_root_ctx *ctx) |
Frees the library-specific TLSv1 context. More... | |
bool | tls_ctx_initialised (struct tls_root_ctx *ctx) |
Checks whether the given TLS context is initialised. More... | |
bool | tls_ctx_set_options (struct tls_root_ctx *ctx, unsigned int ssl_flags) |
Set any library specific options. More... | |
void | tls_ctx_restrict_ciphers (struct tls_root_ctx *ctx, const char *ciphers) |
Restrict the list of ciphers that can be used within the TLS context for TLS 1.2 and below. More... | |
void | tls_ctx_restrict_ciphers_tls13 (struct tls_root_ctx *ctx, const char *ciphers) |
Restrict the list of ciphers that can be used within the TLS context for TLS 1.3 and higher. More... | |
void | tls_ctx_set_cert_profile (struct tls_root_ctx *ctx, const char *profile) |
Set the TLS certificate profile. More... | |
void | tls_ctx_set_tls_groups (struct tls_root_ctx *ctx, const char *groups) |
Set the (elliptic curve) group allowed for signatures and key exchange. More... | |
void | tls_ctx_check_cert_time (const struct tls_root_ctx *ctx) |
Check our certificate notBefore and notAfter fields, and warn if the cert is either not yet valid or has expired. More... | |
void | tls_ctx_load_dh_params (struct tls_root_ctx *ctx, const char *dh_file, bool dh_file_inline) |
Load Diffie Hellman Parameters, and load them into the library-specific TLS context. More... | |
void | tls_ctx_load_ecdh_params (struct tls_root_ctx *ctx, const char *curve_name) |
Load Elliptic Curve Parameters, and load them into the library-specific TLS context. More... | |
int | tls_ctx_load_pkcs12 (struct tls_root_ctx *ctx, const char *pkcs12_file, bool pkcs12_file_inline, bool load_ca_file) |
Load PKCS #12 file for key, cert and (optionally) CA certs, and add to library-specific TLS context. More... | |
void | tls_ctx_load_cert_file (struct tls_root_ctx *ctx, const char *cert_file, bool cert_file_inline) |
Use Windows cryptoapi for key and cert, and add to library-specific TLS context. More... | |
int | tls_ctx_load_priv_file (struct tls_root_ctx *ctx, const char *priv_key_file, bool priv_key_file_inline) |
Load private key file into the given TLS context. More... | |
int | tls_ctx_use_management_external_key (struct tls_root_ctx *ctx) |
Tell the management interface to load the given certificate and the external private key matching the given certificate. More... | |
void | tls_ctx_load_ca (struct tls_root_ctx *ctx, const char *ca_file, bool ca_file_inline, const char *ca_path, bool tls_server) |
Load certificate authority certificates from the given file or path. More... | |
void | tls_ctx_load_extra_certs (struct tls_root_ctx *ctx, const char *extra_certs_file, bool extra_certs_file_inline) |
Load extra certificate authority certificates from the given file or path. More... | |
void | key_state_ssl_init (struct key_state_ssl *ks_ssl, const struct tls_root_ctx *ssl_ctx, bool is_server, struct tls_session *session) |
Initialise the SSL channel part of the given key state. More... | |
void | key_state_ssl_free (struct key_state_ssl *ks_ssl) |
Free the SSL channel part of the given key state. More... | |
void | backend_tls_ctx_reload_crl (struct tls_root_ctx *ssl_ctx, const char *crl_file, bool crl_inline) |
Reload the Certificate Revocation List for the SSL channel. More... | |
bool | key_state_export_keying_material (struct tls_session *session, const char *label, size_t label_size, void *ekm, size_t ekm_size) |
Keying Material Exporters [RFC 5705] allows additional keying material to be derived from existing TLS channel. More... | |
void | print_details (struct key_state_ssl *ks_ssl, const char *prefix) |
void | show_available_tls_ciphers_list (const char *cipher_list, const char *tls_cert_profile, bool tls13) |
void | show_available_curves (void) |
void | get_highest_preference_tls_cipher (char *buf, int size) |
const char * | get_ssl_library_version (void) |
return a pointer to a static memory area containing the name and version number of the SSL library in use More... | |
Functions for packets to be sent to a remote OpenVPN peer | |
int | key_state_write_plaintext (struct key_state_ssl *ks_ssl, struct buffer *buf) |
Insert a plaintext buffer into the TLS module. More... | |
int | key_state_write_plaintext_const (struct key_state_ssl *ks_ssl, const uint8_t *data, int len) |
Insert plaintext data into the TLS module. More... | |
int | key_state_read_ciphertext (struct key_state_ssl *ks_ssl, struct buffer *buf) |
Extract ciphertext data from the TLS module. More... | |
Functions for packets received from a remote OpenVPN peer | |
int | key_state_write_ciphertext (struct key_state_ssl *ks_ssl, struct buffer *buf) |
Insert a ciphertext buffer into the TLS module. More... | |
int | key_state_read_plaintext (struct key_state_ssl *ks_ssl, struct buffer *buf) |
Extract plaintext data from the TLS module. More... | |
#define EXPORT_DYNAMIC_TLS_CRYPT_LABEL "EXPORTER-OpenVPN-dynamic-tls-crypt" |
Definition at line 394 of file ssl_backend.h.
#define EXPORT_KEY_DATA_LABEL "EXPORTER-OpenVPN-datakeys" |
Definition at line 392 of file ssl_backend.h.
#define EXPORT_P2P_PEERID_LABEL "EXPORTER-OpenVPN-p2p-peerid" |
Definition at line 393 of file ssl_backend.h.
#define SSLAPI SSLAPI_OPENSSL |
Definition at line 38 of file ssl_backend.h.
#define TLS_VER_1_0 1 |
Definition at line 114 of file ssl_backend.h.
#define TLS_VER_1_1 2 |
Definition at line 115 of file ssl_backend.h.
#define TLS_VER_1_2 3 |
Definition at line 116 of file ssl_backend.h.
#define TLS_VER_1_3 4 |
Definition at line 117 of file ssl_backend.h.
#define TLS_VER_BAD -1 |
Parse a TLS version specifier.
vstr | The TLS version string |
extra | An optional extra parameter, may be NULL |
Definition at line 112 of file ssl_backend.h.
#define TLS_VER_UNSPEC 0 /* default */ |
Definition at line 113 of file ssl_backend.h.
void backend_tls_ctx_reload_crl | ( | struct tls_root_ctx * | ssl_ctx, |
const char * | crl_file, | ||
bool | crl_inline | ||
) |
Reload the Certificate Revocation List for the SSL channel.
ssl_ctx | The TLS context to use when reloading the CRL |
crl_file | The file name to load the CRL from, or an array containing the inline CRL. |
crl_inline | True if crl_file is an inline CRL. |
Definition at line 1090 of file ssl_openssl.c.
References ASSERT, crypto_msg, tls_root_ctx::ctx, M_FATAL, M_INFO, M_WARN, msg, print_key_filename(), STACK_OF(), X509_OBJECT_free(), and X509_OBJECT_get_type().
Referenced by tls_ctx_reload_crl().
void get_highest_preference_tls_cipher | ( | char * | buf, |
int | size | ||
) |
Definition at line 2286 of file ssl_openssl.c.
References crypto_msg, tls_root_ctx::ctx, M_FATAL, and strncpynt().
const char* get_ssl_library_version | ( | void | ) |
return a pointer to a static memory area containing the name and version number of the SSL library in use
Definition at line 2311 of file ssl_openssl.c.
References OPENSSL_VERSION, and OpenSSL_version.
Referenced by push_peer_info(), and show_library_versions().
bool key_state_export_keying_material | ( | struct tls_session * | session, |
const char * | label, | ||
size_t | label_size, | ||
void * | ekm, | ||
size_t | ekm_size | ||
) |
Keying Material Exporters [RFC 5705] allows additional keying material to be derived from existing TLS channel.
This exported keying material can then be used for a variety of purposes.
session | The session associated with the given key_state |
label | The label to use when exporting the key |
label_size | The size of the label to use when exporting the key |
ekm | Buffer to return the exported key material in |
ekm_size | The size of ekm, in bytes |
Definition at line 161 of file ssl_openssl.c.
References ASSERT, session::key, KS_PRIMARY, and secure_memzero().
Referenced by export_user_keying_material(), generate_key_expansion_tls_export(), p2p_ncp_set_options(), and tls_session_generate_dynamic_tls_crypt_key().
void key_state_ssl_free | ( | struct key_state_ssl * | ks_ssl | ) |
Free the SSL channel part of the given key state.
ks_ssl | The SSL channel's state info to free |
Definition at line 1966 of file ssl_openssl.c.
References key_state_ssl::ct_in, key_state_ssl::ct_out, key_state_ssl::ssl, and key_state_ssl::ssl_bio.
Referenced by key_state_free().
void key_state_ssl_init | ( | struct key_state_ssl * | ks_ssl, |
const struct tls_root_ctx * | ssl_ctx, | ||
bool | is_server, | ||
struct tls_session * | session | ||
) |
Initialise the SSL channel part of the given key state.
Settings will be loaded from a previously initialised TLS context.
ks_ssl | The SSL channel's state info to initialise |
ssl_ctx | The TLS context to use when initialising the channel. |
is_server | Initialise a server? |
session | The session associated with the given key_state |
Definition at line 1926 of file ssl_openssl.c.
References ASSERT, CLEAR, crypto_msg, key_state_ssl::ct_in, key_state_ssl::ct_out, tls_root_ctx::ctx, M_FATAL, mydata_index, key_state_ssl::ssl, and key_state_ssl::ssl_bio.
Referenced by key_state_init().
int pem_password_callback | ( | char * | buf, |
int | size, | ||
int | rwflag, | ||
void * | u | ||
) |
Callback to retrieve the user's password.
buf | Buffer to return the password in |
size | Size of the buffer |
rwflag | Unused, needed for OpenSSL compatibility |
u | Unused, needed for OpenSSL compatibility |
Definition at line 416 of file ssl.c.
References passbuf, user_pass::password, pem_password_setup(), purge_user_pass(), and strncpynt().
Referenced by tls_ctx_load_pkcs12(), and tls_ctx_set_options().
void print_details | ( | struct key_state_ssl * | ks_ssl, |
const char * | prefix | ||
) |
Definition at line 2149 of file ssl_openssl.c.
References D_HANDSHAKE, msg, openvpn_snprintf(), print_cert_details(), and key_state_ssl::ssl.
Referenced by session_move_active().
void show_available_curves | ( | void | ) |
Definition at line 2248 of file ssl_openssl.c.
References ALLOC_ARRAY, crypto_msg, M_FATAL, M_WARN, and msg.
Referenced by print_openssl_info().
void show_available_tls_ciphers_list | ( | const char * | cipher_list, |
const char * | tls_cert_profile, | ||
bool | tls13 | ||
) |
Definition at line 2173 of file ssl_openssl.c.
References crypto_msg, tls_root_ctx::ctx, tls_cipher_name_pair::iana_name, M_FATAL, openssl_tls_version(), SSL_CTX_set_max_proto_version(), SSL_CTX_set_min_proto_version(), STACK_OF(), tls_ctx_restrict_ciphers(), tls_ctx_restrict_ciphers_tls13(), tls_ctx_set_cert_profile(), tls_get_cipher_name_pair(), and TLS_VER_1_3.
Referenced by show_available_tls_ciphers().
void tls_clear_error | ( | void | ) |
Clear the underlying SSL library's error state.
Referenced by handle_data_channel_packet(), init_ssl(), tls_multi_process(), tls_pre_decrypt(), tls_pre_decrypt_lite(), tls_process_state(), tls_rec_payload(), tls_send_payload(), and verify_cert().
void tls_ctx_check_cert_time | ( | const struct tls_root_ctx * | ctx | ) |
Check our certificate notBefore and notAfter fields, and warn if the cert is either not yet valid or has expired.
Note that this is a non-fatal error, since we compare against the system time, which might be incorrect.
ctx | TLS context to get our certificate from. |
Definition at line 624 of file ssl_openssl.c.
References ASSERT, tls_root_ctx::ctx, D_TLS_DEBUG_MED, M_WARN, msg, X509_get0_notAfter, and X509_get0_notBefore.
Referenced by init_ssl().
void tls_ctx_client_new | ( | struct tls_root_ctx * | ctx | ) |
Initialises a library-specific TLS context for a client.
ctx | TLS context to initialise |
Definition at line 127 of file ssl_openssl.c.
References ASSERT, crypto_msg, tls_root_ctx::ctx, M_FATAL, M_WARN, SSL_CTX_new_ex, and tls_libctx.
Referenced by init_ssl().
void tls_ctx_free | ( | struct tls_root_ctx * | ctx | ) |
Frees the library-specific TLSv1 context.
ctx | TLS context to free |
Definition at line 145 of file ssl_openssl.c.
References ASSERT, tls_root_ctx::ctx, and unload_xkey_provider().
Referenced by init_ssl(), and key_schedule_free().
bool tls_ctx_initialised | ( | struct tls_root_ctx * | ctx | ) |
Checks whether the given TLS context is initialised.
ctx | TLS context to check |
Definition at line 154 of file ssl_openssl.c.
References ASSERT, and tls_root_ctx::ctx.
Referenced by do_init_crypto_tls_c1(), and key_schedule_free().
void tls_ctx_load_ca | ( | struct tls_root_ctx * | ctx, |
const char * | ca_file, | ||
bool | ca_file_inline, | ||
const char * | ca_path, | ||
bool | tls_server | ||
) |
Load certificate authority certificates from the given file or path.
Note that not all SSL libraries support loading from a path.
ctx | TLS context to use |
ca_file | The file name to load the CAs from, or a string containing the CAs in the case of inline files. |
ca_file_inline | True if ca_file is an inline file |
ca_path | The path to load the CAs from |
Definition at line 1558 of file ssl_openssl.c.
References ASSERT, crypto_msg, tls_root_ctx::ctx, M_FATAL, M_WARN, msg, print_key_filename(), sk_x509_name_cmp(), and STACK_OF().
Referenced by init_ssl().
void tls_ctx_load_cert_file | ( | struct tls_root_ctx * | ctx, |
const char * | cert_file, | ||
bool | cert_file_inline | ||
) |
Use Windows cryptoapi for key and cert, and add to library-specific TLS context.
ctx | TLS context to use |
crypto_api_cert | String representing the certificate to load. Load certificate file into the given TLS context. If the given certificate file contains a certificate chain, load the whole chain. |
ctx | TLS context to use |
cert_file | The file name to load the certificate from, or a string containing the certificate in the case of inline files. |
cert_file_inline | True if cert_file is an inline file. |
Definition at line 968 of file ssl_openssl.c.
References ASSERT, crypto_msg, crypto_print_openssl_errors(), tls_root_ctx::ctx, M_DEBUG, M_FATAL, SSL_CTX_get_default_passwd_cb(), SSL_CTX_get_default_passwd_cb_userdata(), and tls_ctx_add_extra_certs().
Referenced by init_ssl().
void tls_ctx_load_dh_params | ( | struct tls_root_ctx * | ctx, |
const char * | dh_file, | ||
bool | dh_file_inline | ||
) |
Load Diffie Hellman Parameters, and load them into the library-specific TLS context.
ctx | TLS context to use |
dh_file | The file name to load the parameters from, or a string containing the parameters in the case of inline files. |
dh_file_inline | True if dh_file is an inline file. |
Definition at line 660 of file ssl_openssl.c.
References ASSERT, crypto_msg, tls_root_ctx::ctx, D_TLS_DEBUG_LOW, M_FATAL, msg, and print_key_filename().
Referenced by init_ssl().
void tls_ctx_load_ecdh_params | ( | struct tls_root_ctx * | ctx, |
const char * | curve_name | ||
) |
Load Elliptic Curve Parameters, and load them into the library-specific TLS context.
ctx | TLS context to use |
curve_name | The name of the elliptic curve to load. |
Definition at line 721 of file ssl_openssl.c.
References crypto_msg, tls_root_ctx::ctx, D_LOW, D_TLS_DEBUG, D_TLS_DEBUG_LOW, M_FATAL, M_WARN, and msg.
Referenced by init_ssl().
void tls_ctx_load_extra_certs | ( | struct tls_root_ctx * | ctx, |
const char * | extra_certs_file, | ||
bool | extra_certs_file_inline | ||
) |
Load extra certificate authority certificates from the given file or path.
These Load extra certificates that are part of our own certificate chain but shouldn't be included in the verify chain.
ctx | TLS context to use |
extra_certs_file | The file name to load the certs from, or a string containing the certs in the case of inline files. |
extra_certs_file_inline | True if extra_certs_file is an inline file. |
Definition at line 1707 of file ssl_openssl.c.
References crypto_msg, M_FATAL, print_key_filename(), and tls_ctx_add_extra_certs().
Referenced by init_ssl().
int tls_ctx_load_pkcs12 | ( | struct tls_root_ctx * | ctx, |
const char * | pkcs12_file, | ||
bool | pkcs12_file_inline, | ||
bool | load_ca_file | ||
) |
Load PKCS #12 file for key, cert and (optionally) CA certs, and add to library-specific TLS context.
ctx | TLS context to use |
pkcs12_file | The file name to load the information from, or a string containing the information in the case of inline files. |
pkcs12_file_inline | True if pkcs12_file is an inline file. |
Definition at line 792 of file ssl_openssl.c.
References ASSERT, crypto_msg, tls_root_ctx::ctx, M_FATAL, M_WARN, management_auth_failure(), pem_password_callback(), platform_fopen(), STACK_OF(), and UP_TYPE_PRIVATE_KEY.
Referenced by init_ssl().
int tls_ctx_load_priv_file | ( | struct tls_root_ctx * | ctx, |
const char * | priv_key_file, | ||
bool | priv_key_file_inline | ||
) |
Load private key file into the given TLS context.
ctx | TLS context to use |
priv_key_file | The file name to load the private key from, or a string containing the private key in the case of inline files. |
priv_key_file_inline | True if priv_key_file is an inline file |
Definition at line 1029 of file ssl_openssl.c.
References ASSERT, crypto_msg, tls_root_ctx::ctx, engine_load_key(), M_FATAL, M_WARN, management_auth_failure(), print_key_filename(), SSL_CTX_get_default_passwd_cb(), SSL_CTX_get_default_passwd_cb_userdata(), and UP_TYPE_PRIVATE_KEY.
Referenced by init_ssl().
void tls_ctx_restrict_ciphers | ( | struct tls_root_ctx * | ctx, |
const char * | ciphers | ||
) |
Restrict the list of ciphers that can be used within the TLS context for TLS 1.2 and below.
ctx | TLS context to restrict, must be valid. |
ciphers | String containing : delimited cipher names, or NULL to use sane defaults. |
Definition at line 435 of file ssl_openssl.c.
References ASSERT, convert_tls_list_to_openssl(), crypto_msg, tls_root_ctx::ctx, and M_FATAL.
Referenced by init_ssl(), and show_available_tls_ciphers_list().
void tls_ctx_restrict_ciphers_tls13 | ( | struct tls_root_ctx * | ctx, |
const char * | ciphers | ||
) |
Restrict the list of ciphers that can be used within the TLS context for TLS 1.3 and higher.
ctx | TLS context to restrict, must be valid. |
ciphers | String containing : delimited cipher names, or NULL to use sane defaults. |
Definition at line 497 of file ssl_openssl.c.
References ASSERT, convert_tls13_list_to_openssl(), crypto_msg, tls_root_ctx::ctx, M_FATAL, and M_WARN.
Referenced by init_ssl(), and show_available_tls_ciphers_list().
void tls_ctx_server_new | ( | struct tls_root_ctx * | ctx | ) |
Initialise a library-specific TLS context for a server.
ctx | TLS context to initialise |
Definition at line 109 of file ssl_openssl.c.
References ASSERT, crypto_msg, tls_root_ctx::ctx, M_FATAL, M_WARN, SSL_CTX_new_ex, and tls_libctx.
Referenced by init_ssl().
void tls_ctx_set_cert_profile | ( | struct tls_root_ctx * | ctx, |
const char * | profile | ||
) |
Set the TLS certificate profile.
The profile defines which crypto algorithms may be used in the supplied certificate.
ctx | TLS context to restrict, must be valid. |
profile | The profile name ('preferred', 'legacy' or 'suiteb'). Defaults to 'preferred' if NULL. |
Definition at line 526 of file ssl_openssl.c.
References tls_root_ctx::ctx, M_FATAL, M_WARN, and msg.
Referenced by init_ssl(), and show_available_tls_ciphers_list().
bool tls_ctx_set_options | ( | struct tls_root_ctx * | ctx, |
unsigned int | ssl_flags | ||
) |
Set any library specific options.
Examples include disabling session caching, the password callback to use, and session verification parameters.
ctx | TLS context to set options on |
ssl_flags | SSL flags to set |
Definition at line 315 of file ssl_openssl.c.
References ASSERT, tls_root_ctx::ctx, info_callback(), pem_password_callback(), SSLF_CLIENT_CERT_NOT_REQUIRED, SSLF_CLIENT_CERT_OPTIONAL, tls_ctx_set_tls_versions(), and verify_callback().
Referenced by init_ssl().
void tls_ctx_set_tls_groups | ( | struct tls_root_ctx * | ctx, |
const char * | groups | ||
) |
Set the (elliptic curve) group allowed for signatures and key exchange.
ctx | TLS context to restrict, must be valid. |
groups | List of groups that will be allowed, in priority, separated by : |
Definition at line 564 of file ssl_openssl.c.
References ALLOC_ARRAY_CLEAR_GC, ASSERT, crypto_msg, tls_root_ctx::ctx, gc_free(), gc_new(), get_num_elements(), M_FATAL, M_WARN, msg, SSL_CTX_set1_groups, streq, string_alloc(), and strsep().
Referenced by init_ssl().
int tls_ctx_use_management_external_key | ( | struct tls_root_ctx * | ctx | ) |
Tell the management interface to load the given certificate and the external private key matching the given certificate.
ctx | TLS context to use |
Definition at line 1478 of file ssl_openssl.c.
References ASSERT, cleanup(), crypto_msg, tls_root_ctx::ctx, M_FATAL, M_WARN, tls_ctx_use_external_rsa_key(), tls_libctx, and X509_get0_pubkey().
Referenced by init_ssl().
void tls_free_lib | ( | void | ) |
Free any global SSL library-specific data structures.
Definition at line 98 of file ssl_openssl.c.
Referenced by free_ssl_lib().
const tls_cipher_name_pair* tls_get_cipher_name_pair | ( | const char * | cipher_name, |
size_t | len | ||
) |
Definition at line 258 of file ssl.c.
References tls_cipher_name_pair::iana_name, tls_cipher_name_pair::openssl_name, and tls_cipher_name_translation_table.
Referenced by convert_tls_list_to_openssl(), and show_available_tls_ciphers_list().
void tls_init_lib | ( | void | ) |
Perform any static initialisation necessary by the library.
Called on OpenVPN initialisation
Definition at line 84 of file ssl_openssl.c.
References ASSERT, and mydata_index.
Referenced by init_ssl_lib().
int tls_version_max | ( | void | ) |
Return the maximum TLS version (as a TLS_VER_x constant) supported by current SSL implementation.
Definition at line 212 of file ssl_openssl.c.
References TLS_VER_1_0, TLS_VER_1_1, TLS_VER_1_2, and TLS_VER_1_3.
Referenced by options_postprocess_verify_ce(), show_available_tls_ciphers(), and tls_version_parse().
int tls_version_parse | ( | const char * | vstr, |
const char * | extra | ||
) |
Definition at line 569 of file ssl.c.
References TLS_VER_1_0, TLS_VER_1_1, TLS_VER_1_2, TLS_VER_1_3, TLS_VER_BAD, and tls_version_max().
Referenced by add_option().