diff options
| author | Matt Caswell <matt@openssl.org> | 2018-06-07 09:11:05 +0100 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2018-07-02 15:06:12 +0100 |
| commit | 5d263fb78b51f96753056f21abc4d992d0219df2 (patch) | |
| tree | 6027b7132a4d5db2050ebd820bb2e163a4247641 /include | |
| parent | b6ff436fcb597663ffcfe6d724d207cf120e7250 (diff) | |
Make the anti-replay feature optional
Fixes #6389
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6469)
Diffstat (limited to 'include')
| -rw-r--r-- | include/openssl/ssl.h | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/include/openssl/ssl.h b/include/openssl/ssl.h index 943a8d6c9f..dca4f3d2d8 100644 --- a/include/openssl/ssl.h +++ b/include/openssl/ssl.h @@ -368,6 +368,12 @@ typedef int (*SSL_verify_cb)(int preverify_ok, X509_STORE_CTX *x509_ctx); */ # define SSL_OP_TLS_ROLLBACK_BUG 0x00800000U +/* + * Switches off automatic TLSv1.3 anti-replay protection for early data. This + * is a server-side option only (no effect on the client). + */ +# define SSL_OP_NO_ANTI_REPLAY 0x01000000U + # define SSL_OP_NO_SSLv3 0x02000000U # define SSL_OP_NO_TLSv1 0x04000000U # define SSL_OP_NO_TLSv1_2 0x08000000U |