Lines Matching defs:options
558 struct options struct
560 const char *server_addr; /* address on which the ssl service runs */
561 const char *server_port; /* port on which the ssl service runs */
562 int debug_level; /* level of debugging */
563 int nbio; /* should I/O be blocking? */
564 int event; /* loop or event-driven IO? level or edge triggered? */
565 uint32_t read_timeout; /* timeout on mbedtls_ssl_read() in milliseconds */
566 int response_size; /* pad response with header to requested size */
567 uint16_t buffer_size; /* IO buffer size */
568 const char *ca_file; /* the file with the CA certificate(s) */
569 const char *ca_path; /* the path with the CA certificate(s) reside */
570 const char *crt_file; /* the file with the server certificate */
571 const char *key_file; /* the file with the server key */
572 int key_opaque; /* handle private key as if it were opaque */
573 const char *key_pwd; /* the password for the server key */
574 const char *crt_file2; /* the file with the 2nd server certificate */
575 const char *key_file2; /* the file with the 2nd server key */
576 const char *key_pwd2; /* the password for the 2nd server key */
577 const char *async_operations; /* supported SSL asynchronous operations */
578 …ate_delay1; /* number of times f_async_resume needs to be called for key 1, or -1 for no async */
579 …ate_delay2; /* number of times f_async_resume needs to be called for key 2, or -1 for no async */
580 int async_private_error; /* inject error in async private callback */
582 int psk_opaque;
583 int psk_list_opaque;
586 int ca_callback; /* Use callback for trusted certificate list */
588 const char *psk; /* the pre-shared key */
589 const char *psk_identity; /* the pre-shared key identity */
590 char *psk_list; /* list of PSK id/key pairs for callback */
591 const char *ecjpake_pw; /* the EC J-PAKE password */
592 int force_ciphersuite[2]; /* protocol/ciphersuite to use, or all */
594 int tls13_kex_modes; /* supported TLS 1.3 key exchange modes */
596 int renegotiation; /* enable / disable renegotiation */
597 int allow_legacy; /* allow legacy renegotiation */
598 int renegotiate; /* attempt renegotiation? */
599 int renego_delay; /* delay before enforcing renegotiation */
600 uint64_t renego_period; /* period for automatic renegotiation */
601 int exchanges; /* number of data exchanges */
602 int min_version; /* minimum protocol version accepted */
603 int max_version; /* maximum protocol version accepted */
604 int allow_sha1; /* flag for SHA-1 support */
605 int auth_mode; /* verify mode for connection */
606 int cert_req_ca_list; /* should we send the CA list? */
607 unsigned char mfl_code; /* code for maximum fragment length */
608 int trunc_hmac; /* accept truncated hmac? */
609 int tickets; /* enable / disable session tickets */
610 int ticket_timeout; /* session ticket lifetime */
611 int cache_max; /* max number of session cache entries */
612 int cache_timeout; /* expiration delay of session cache entries */
613 char *sni; /* string describing sni information */
614 const char *curves; /* list of supported elliptic curves */
615 const char *sig_algs; /* supported TLS 1.3 signature algorithms */
616 const char *alpn_string; /* ALPN supported protocols */
617 const char *dhm_file; /* the file with the DH parameters */
618 int extended_ms; /* allow negotiation of extended MS? */
619 int etm; /* allow negotiation of encrypt-then-MAC? */
620 int transport; /* TLS or DTLS? */
621 int cookies; /* Use cookies for DTLS? -1 to break them */
622 int anti_replay; /* Use anti-replay for DTLS? -1 for default */
623 uint32_t hs_to_min; /* Initial value of DTLS handshake timer */
624 uint32_t hs_to_max; /* Max value of DTLS handshake timer */
625 int dtls_mtu; /* UDP Maximum tranport unit for DTLS */
626 int dgram_packing; /* allow/forbid datagram packing */
627 int badmac_limit; /* Limit of records with bad MAC */
628 int eap_tls; /* derive EAP-TLS keying material? */
629 int nss_keylog; /* export NSS key log material */
630 const char *nss_keylog_file; /* NSS key log file */
631 int cid_enabled; /* whether to use the CID extension or not */
632 int cid_enabled_renego; /* whether to use the CID extension or not
634 const char *cid_val; /* the CID to use for incoming messages */
635 int serialize; /* serialize/deserialize connection */
636 const char *context_file; /* the file to write a serialized connection
639 const char *cid_val_renego; /* the CID to use for incoming messages
641 int reproducible; /* make communication reproducible */
642 int query_config_mode; /* whether to read config */
643 int use_srtp; /* Support SRTP */
644 int force_srtp_profile; /* SRTP protection profile to use or all */
645 int support_mki; /* The dtls mki mki support */