Lines Matching defs:options
468 struct options struct
470 const char *server_name; /* hostname of the server (client only) */
471 const char *server_addr; /* address of the server (client only) */
472 const char *server_port; /* port on which the ssl service runs */
473 int debug_level; /* level of debugging */
474 int nbio; /* should I/O be blocking? */
475 int event; /* loop or event-driven IO? level or edge triggered? */
476 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
477 int max_resend; /* DTLS times to resend on read timeout */
478 const char *request_page; /* page on server to request */
479 int request_size; /* pad request with header to requested size */
480 const char *ca_file; /* the file with the CA certificate(s) */
481 const char *ca_path; /* the path with the CA certificate(s) reside */
482 const char *crt_file; /* the file with the client certificate */
483 const char *key_file; /* the file with the client key */
484 int key_opaque; /* handle private key as if it were opaque */
486 int psk_opaque;
489 int ca_callback; /* Use callback for trusted certificate list */
491 const char *key_pwd; /* the password for the client key */
492 const char *psk; /* the pre-shared key */
493 const char *psk_identity; /* the pre-shared key identity */
494 const char *ecjpake_pw; /* the EC J-PAKE password */
495 int ec_max_ops; /* EC consecutive operations limit */
496 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
498 int tls13_kex_modes; /* supported TLS 1.3 key exchange modes */
500 int renegotiation; /* enable / disable renegotiation */
501 int allow_legacy; /* allow legacy renegotiation */
502 int renegotiate; /* attempt renegotiation? */
503 int renego_delay; /* delay before enforcing renegotiation */
504 int exchanges; /* number of data exchanges */
505 int min_version; /* minimum protocol version accepted */
506 int max_version; /* maximum protocol version accepted */
507 int allow_sha1; /* flag for SHA-1 support */
508 int auth_mode; /* verify mode for connection */
509 unsigned char mfl_code; /* code for maximum fragment length */
510 int trunc_hmac; /* negotiate truncated hmac or not */
511 int recsplit; /* enable record splitting? */
512 int dhmlen; /* minimum DHM params len in bits */
513 int reconnect; /* attempt to resume session */
514 const char *reco_server_name; /* hostname of the server (re-connect) */
515 int reco_delay; /* delay in seconds before resuming session */
516 int reco_mode; /* how to keep the session around */
517 int reconnect_hard; /* unexpectedly reconnect from the same port */
518 int tickets; /* enable / disable session tickets */
519 const char *curves; /* list of supported elliptic curves */
520 const char *sig_algs; /* supported TLS 1.3 signature algorithms */
521 const char *alpn_string; /* ALPN supported protocols */
522 int transport; /* TLS or DTLS? */
523 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
524 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
525 int dtls_mtu; /* UDP Maximum transport unit for DTLS */
526 int fallback; /* is this a fallback connection? */
527 int dgram_packing; /* allow/forbid datagram packing */
528 int extended_ms; /* negotiate extended master secret? */
529 int etm; /* negotiate encrypt then mac? */
530 int context_crt_cb; /* use context-specific CRT verify callback */
531 int eap_tls; /* derive EAP-TLS keying material? */
532 int nss_keylog; /* export NSS key log material */
533 const char *nss_keylog_file; /* NSS key log file */
534 int cid_enabled; /* whether to use the CID extension or not */
535 int cid_enabled_renego; /* whether to use the CID extension or not
537 const char *cid_val; /* the CID to use for incoming messages */
538 int serialize; /* serialize/deserialize connection */
539 const char *context_file; /* the file to write a serialized connection
542 const char *cid_val_renego; /* the CID to use for incoming messages
544 int reproducible; /* make communication reproducible */
545 int skip_close_notify; /* skip sending the close_notify alert */
547 int early_data; /* support for early data */
549 int query_config_mode; /* whether to read config */
550 int use_srtp; /* Support SRTP */
551 int force_srtp_profile; /* SRTP protection profile to use or all */
552 const char *mki; /* The dtls mki value to use */
553 const char *key_opaque_alg1; /* Allowed opaque key alg 1 */
554 const char *key_opaque_alg2; /* Allowed Opaque key alg 2 */