OLD | NEW |
1 /* | 1 /* |
2 * This file contains prototypes for the public SSL functions. | 2 * This file contains prototypes for the public SSL functions. |
3 * | 3 * |
4 * ***** BEGIN LICENSE BLOCK ***** | 4 * ***** BEGIN LICENSE BLOCK ***** |
5 * Version: MPL 1.1/GPL 2.0/LGPL 2.1 | 5 * Version: MPL 1.1/GPL 2.0/LGPL 2.1 |
6 * | 6 * |
7 * The contents of this file are subject to the Mozilla Public License Version | 7 * The contents of this file are subject to the Mozilla Public License Version |
8 * 1.1 (the "License"); you may not use this file except in compliance with | 8 * 1.1 (the "License"); you may not use this file except in compliance with |
9 * the License. You may obtain a copy of the License at | 9 * the License. You may obtain a copy of the License at |
10 * http://www.mozilla.org/MPL/ | 10 * http://www.mozilla.org/MPL/ |
(...skipping 110 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
121 #define SSL_ENABLE_SESSION_TICKETS 18 /* Enable TLS SessionTicket */ | 121 #define SSL_ENABLE_SESSION_TICKETS 18 /* Enable TLS SessionTicket */ |
122 /* extension (off by default) */ | 122 /* extension (off by default) */ |
123 #define SSL_ENABLE_DEFLATE 19 /* Enable TLS compression with */ | 123 #define SSL_ENABLE_DEFLATE 19 /* Enable TLS compression with */ |
124 /* DEFLATE (off by default) */ | 124 /* DEFLATE (off by default) */ |
125 #define SSL_ENABLE_RENEGOTIATION 20 /* Values below (default: never) */ | 125 #define SSL_ENABLE_RENEGOTIATION 20 /* Values below (default: never) */ |
126 #define SSL_REQUIRE_SAFE_NEGOTIATION 21 /* Peer must send Signalling */ | 126 #define SSL_REQUIRE_SAFE_NEGOTIATION 21 /* Peer must send Signalling */ |
127 /* Cipher Suite Value (SCSV) or */ | 127 /* Cipher Suite Value (SCSV) or */ |
128 /* Renegotiation Info (RI) */ | 128 /* Renegotiation Info (RI) */ |
129 /* extension in ALL handshakes. */ | 129 /* extension in ALL handshakes. */ |
130 /* default: off */ | 130 /* default: off */ |
131 #define SSL_ENABLE_FALSE_START» 22 /* Enable SSL false start (off by */ | 131 #define SSL_ENABLE_FALSE_START 22 /* Enable SSL false start (off by */ |
132 » » » » » /* default, applies only to */ | 132 /* default, applies only to */ |
133 » » » » » /* clients). False start is a */ | 133 /* clients). False start is a */ |
134 /* mode where an SSL client will start sending application data before */ | 134 /* mode where an SSL client will start sending application data before */ |
135 /* verifying the server's Finished message. This means that we could end up */ | 135 /* verifying the server's Finished message. This means that we could end up */ |
136 /* sending data to an imposter. However, the data will be encrypted and */ | 136 /* sending data to an imposter. However, the data will be encrypted and */ |
137 /* only the true server can derive the session key. Thus, so long as the */ | 137 /* only the true server can derive the session key. Thus, so long as the */ |
138 /* cipher isn't broken this is safe. Because of this, False Start will only */ | 138 /* cipher isn't broken this is safe. Because of this, False Start will only */ |
139 /* occur on RSA or DH ciphersuites where the cipher's key length is >= 80 */ | 139 /* occur on RSA or DH ciphersuites where the cipher's key length is >= 80 */ |
140 /* bits. The advantage of False Start is that it saves a round trip for */ | 140 /* bits. The advantage of False Start is that it saves a round trip for */ |
141 /* client-speaks-first protocols when performing a full handshake. */ | 141 /* client-speaks-first protocols when performing a full handshake. */ |
142 | 142 |
143 #ifdef SSL_DEPRECATED_FUNCTION | 143 #ifdef SSL_DEPRECATED_FUNCTION |
(...skipping 492 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
636 ** Did the handshake with the peer negotiate the given extension? | 636 ** Did the handshake with the peer negotiate the given extension? |
637 ** Output parameter valid only if function returns SECSuccess | 637 ** Output parameter valid only if function returns SECSuccess |
638 */ | 638 */ |
639 SSL_IMPORT SECStatus SSL_HandshakeNegotiatedExtension(PRFileDesc * socket, | 639 SSL_IMPORT SECStatus SSL_HandshakeNegotiatedExtension(PRFileDesc * socket, |
640 SSLExtensionType extId, | 640 SSLExtensionType extId, |
641 PRBool *yes); | 641 PRBool *yes); |
642 | 642 |
643 SEC_END_PROTOS | 643 SEC_END_PROTOS |
644 | 644 |
645 #endif /* __ssl_h_ */ | 645 #endif /* __ssl_h_ */ |
OLD | NEW |