diff options
| author | Steven Valdez <svaldez@google.com> | 2016-05-24 19:31:07 +0300 |
|---|---|---|
| committer | Adam Langley <agl@google.com> | 2016-05-25 20:41:36 +0300 |
| commit | 4f94b1c19f8520273fa7751687b6daab82e02bc3 (patch) | |
| tree | 9a9e3380b1b2c1d9c1dd9d231433c24f479007bc /include/openssl/ssl.h | |
| parent | 1eca1d3816df495e83e0d22edfbb2d380dda6984 (diff) | |
Adding TLS 1.3 constants.
Constants representing TLS 1.3 are added to allow for future work to be
flagged on TLS1_3_VERSION. To prevent BoringSSL from negotiating the
non-existent TLS 1.3 version, it is explicitly disabled using
SSL_OP_NO_TLSv1_3.
Change-Id: Ie5258a916f4c19ef21646c4073d5b4a7974d6f3f
Reviewed-on: https://boringssl-review.googlesource.com/8041
Reviewed-by: Adam Langley <agl@google.com>
Diffstat (limited to 'include/openssl/ssl.h')
| -rw-r--r-- | include/openssl/ssl.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/include/openssl/ssl.h b/include/openssl/ssl.h index bd583e8e..16489220 100644 --- a/include/openssl/ssl.h +++ b/include/openssl/ssl.h @@ -537,6 +537,7 @@ OPENSSL_EXPORT int DTLSv1_handle_timeout(SSL *ssl); #define TLS1_VERSION 0x0301 #define TLS1_1_VERSION 0x0302 #define TLS1_2_VERSION 0x0303 +#define TLS1_3_VERSION 0x0304 #define DTLS1_VERSION 0xfeff #define DTLS1_2_VERSION 0xfefd @@ -3230,6 +3231,7 @@ DECLARE_STACK_OF(SSL_COMP) #define SSL_OP_NO_TLSv1 0x04000000L #define SSL_OP_NO_TLSv1_2 0x08000000L #define SSL_OP_NO_TLSv1_1 0x10000000L +#define SSL_OP_NO_TLSv1_3 0x20000000L #define SSL_OP_NO_DTLSv1 SSL_OP_NO_TLSv1 #define SSL_OP_NO_DTLSv1_2 SSL_OP_NO_TLSv1_2 @@ -3386,6 +3388,7 @@ OPENSSL_EXPORT const char *SSL_alert_desc_string(int value); #define SSL_TXT_TLSV1 "TLSv1" #define SSL_TXT_TLSV1_1 "TLSv1.1" #define SSL_TXT_TLSV1_2 "TLSv1.2" +#define SSL_TXT_TLSV1_3 "TLSv1.3" #define SSL_TXT_ALL "ALL" #define SSL_TXT_CMPDEF "COMPLEMENTOFDEFAULT" |