| OLD | NEW |
| 1 /* | 1 /* |
| 2 * This file contains prototypes for the public SSL functions. | 2 * This file contains prototypes for the public SSL functions. |
| 3 * | 3 * |
| 4 * ***** BEGIN LICENSE BLOCK ***** | 4 * ***** BEGIN LICENSE BLOCK ***** |
| 5 * Version: MPL 1.1/GPL 2.0/LGPL 2.1 | 5 * Version: MPL 1.1/GPL 2.0/LGPL 2.1 |
| 6 * | 6 * |
| 7 * The contents of this file are subject to the Mozilla Public License Version | 7 * The contents of this file are subject to the Mozilla Public License Version |
| 8 * 1.1 (the "License"); you may not use this file except in compliance with | 8 * 1.1 (the "License"); you may not use this file except in compliance with |
| 9 * the License. You may obtain a copy of the License at | 9 * the License. You may obtain a copy of the License at |
| 10 * http://www.mozilla.org/MPL/ | 10 * http://www.mozilla.org/MPL/ |
| (...skipping 110 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 121 #define SSL_ENABLE_SESSION_TICKETS 18 /* Enable TLS SessionTicket */ | 121 #define SSL_ENABLE_SESSION_TICKETS 18 /* Enable TLS SessionTicket */ |
| 122 /* extension (off by default) */ | 122 /* extension (off by default) */ |
| 123 #define SSL_ENABLE_DEFLATE 19 /* Enable TLS compression with */ | 123 #define SSL_ENABLE_DEFLATE 19 /* Enable TLS compression with */ |
| 124 /* DEFLATE (off by default) */ | 124 /* DEFLATE (off by default) */ |
| 125 #define SSL_ENABLE_RENEGOTIATION 20 /* Values below (default: never) */ | 125 #define SSL_ENABLE_RENEGOTIATION 20 /* Values below (default: never) */ |
| 126 #define SSL_REQUIRE_SAFE_NEGOTIATION 21 /* Peer must send Signalling */ | 126 #define SSL_REQUIRE_SAFE_NEGOTIATION 21 /* Peer must send Signalling */ |
| 127 /* Cipher Suite Value (SCSV) or */ | 127 /* Cipher Suite Value (SCSV) or */ |
| 128 /* Renegotiation Info (RI) */ | 128 /* Renegotiation Info (RI) */ |
| 129 /* extension in ALL handshakes. */ | 129 /* extension in ALL handshakes. */ |
| 130 /* default: off */ | 130 /* default: off */ |
| 131 #define SSL_ENABLE_FALSE_START» 22 /* Enable SSL false start (off by */ | 131 #define SSL_ENABLE_FALSE_START 22 /* Enable SSL false start (off by */ |
| 132 » » » » » /* default, applies only to */ | 132 /* default, applies only to */ |
| 133 » » » » » /* clients). False start is a */ | 133 /* clients). False start is a */ |
| 134 /* mode where an SSL client will start sending application data before */ | 134 /* mode where an SSL client will start sending application data before */ |
| 135 /* verifying the server's Finished message. This means that we could end up */ | 135 /* verifying the server's Finished message. This means that we could end up */ |
| 136 /* sending data to an imposter. However, the data will be encrypted and */ | 136 /* sending data to an imposter. However, the data will be encrypted and */ |
| 137 /* only the true server can derive the session key. Thus, so long as the */ | 137 /* only the true server can derive the session key. Thus, so long as the */ |
| 138 /* cipher isn't broken this is safe. Because of this, False Start will only */ | 138 /* cipher isn't broken this is safe. Because of this, False Start will only */ |
| 139 /* occur on RSA or DH ciphersuites where the cipher's key length is >= 80 */ | 139 /* occur on RSA or DH ciphersuites where the cipher's key length is >= 80 */ |
| 140 /* bits. The advantage of False Start is that it saves a round trip for */ | 140 /* bits. The advantage of False Start is that it saves a round trip for */ |
| 141 /* client-speaks-first protocols when performing a full handshake. */ | 141 /* client-speaks-first protocols when performing a full handshake. */ |
| 142 | 142 |
| 143 #ifdef SSL_DEPRECATED_FUNCTION | 143 #ifdef SSL_DEPRECATED_FUNCTION |
| (...skipping 492 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 636 ** Did the handshake with the peer negotiate the given extension? | 636 ** Did the handshake with the peer negotiate the given extension? |
| 637 ** Output parameter valid only if function returns SECSuccess | 637 ** Output parameter valid only if function returns SECSuccess |
| 638 */ | 638 */ |
| 639 SSL_IMPORT SECStatus SSL_HandshakeNegotiatedExtension(PRFileDesc * socket, | 639 SSL_IMPORT SECStatus SSL_HandshakeNegotiatedExtension(PRFileDesc * socket, |
| 640 SSLExtensionType extId, | 640 SSLExtensionType extId, |
| 641 PRBool *yes); | 641 PRBool *yes); |
| 642 | 642 |
| 643 SEC_END_PROTOS | 643 SEC_END_PROTOS |
| 644 | 644 |
| 645 #endif /* __ssl_h_ */ | 645 #endif /* __ssl_h_ */ |
| OLD | NEW |