diff options
author | Tomas Mraz <tomas@openssl.org> | 2023-06-12 18:16:35 +0200 |
---|---|---|
committer | Tomas Mraz <tomas@openssl.org> | 2023-06-23 14:31:45 +0200 |
commit | a02571a02473889d13fe7996e0d2d052328f3199 (patch) | |
tree | 75640dea8f81108e88292cfbb8b4b26e066da959 /doc | |
parent | ff88545e02ab48a52952350c52013cf765455dd3 (diff) |
Support SSL_OP_CLEANSE_PLAINTEXT on QUIC streams
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21182)
Diffstat (limited to 'doc')
-rw-r--r-- | doc/man3/SSL_CTX_set_options.pod | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/doc/man3/SSL_CTX_set_options.pod b/doc/man3/SSL_CTX_set_options.pod index c7170b160a..44d2fd1342 100644 --- a/doc/man3/SSL_CTX_set_options.pod +++ b/doc/man3/SSL_CTX_set_options.pod @@ -443,6 +443,43 @@ renegotiation between OpenSSL clients and unpatched servers B<only>, while B<SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION> allows initial connections and renegotiation between OpenSSL and unpatched clients or servers. +=head2 Applicability of options to QUIC connections and streams + +These options apply to SSL objects referencing a QUIC connection: + +=over 4 + +=item SSL_OP_ALLOW_NO_DHE_KEX + +=item SSL_OP_NO_TX_CERTIFICATE_COMPRESSION + +=item SSL_OP_NO_RX_CERTIFICATE_COMPRESSION + +=item SSL_OP_NO_TICKET + +=item SSL_OP_PRIORITIZE_CHACHA + +=back + +Other options do not have an effect and will be ignored. + +These options apply to SSL objects referencing a QUIC stream: + +=over 4 + +=item SSL_OP_CLEANSE_PLAINTEXT + +=back + +Other options do not have an effect and will be ignored. + +If an SSL object is a QUIC connection object with a default stream attached, +only the stream-relevant options are applied. If it is a QUIC connection +without a default stream, the stream-relevant options are ignored. + +Connection and stream relevant options are initialized from the options +set on SSL_CTX before the connection or stream objects are created. + =head1 RETURN VALUES SSL_CTX_set_options() and SSL_set_options() return the new options bit-mask |