Christian Heimes 3edabd3ccb Provide getters for min/max proto version ... OpenSSL 1.1.0 made SSL_CTX and SSL structs opaque and introduced a new API to set the minimum and maximum protocol version for SSL_CTX with TLS_method(). Add getters to introspect the configured versions: int SSL_CTX_get_min_proto_version(SSL_CTX *ctx); int SSL_CTX_get_max_proto_version(SSL_CTX *ctx); int SSL_get_min_proto_version(SSL *ssl); int SSL_get_max_proto_version(SSL *ssl); NOTE: The getters do not resolv the version in case when the minimum or maxium version are configured as '0' (meaning auto-select lowest and highst version number). Signed-off-by: Christian Heimes <christian@python.org> Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/4364)		2017-09-15 10:04:47 -05:00
..
ASN1_generate_nconf.pod
ASN1_INTEGER_get_int64.pod
ASN1_ITEM_lookup.pod
ASN1_OBJECT_new.pod
ASN1_STRING_length.pod
ASN1_STRING_new.pod
ASN1_STRING_print_ex.pod	Various doc fixes	2017-07-03 10:40:33 -04:00
ASN1_STRING_TABLE_add.pod	Add test cases and docs for ASN1_STRING_TABLE_* functions	2017-07-26 20:06:51 +02:00
ASN1_TIME_set.pod	Consolidate to a single asn1_time_from_tm() function	2017-08-04 11:24:03 +10:00
ASN1_TYPE_get.pod
ASYNC_start_job.pod
ASYNC_WAIT_CTX_new.pod
BF_encrypt.pod
BIO_ADDR.pod
BIO_ADDRINFO.pod
BIO_connect.pod	Various doc fixes	2017-07-03 10:40:33 -04:00
BIO_ctrl.pod
BIO_f_base64.pod
BIO_f_buffer.pod
BIO_f_cipher.pod
BIO_f_md.pod
BIO_f_null.pod
BIO_f_ssl.pod	Don't use "version" in "OpenSSL Version 1.1.0" etc	2017-07-16 17:28:41 -04:00
BIO_find_type.pod
BIO_get_data.pod	Don't use "version" in "OpenSSL Version 1.1.0" etc	2017-07-16 17:28:41 -04:00
BIO_get_ex_new_index.pod	Fix typo in documents	2017-08-01 09:30:11 +10:00
BIO_meth_new.pod	Fix typo in documents	2017-08-01 09:30:11 +10:00
BIO_new_CMS.pod
BIO_new.pod
BIO_parse_hostserv.pod
BIO_printf.pod
BIO_push.pod	Don't use "version" in "OpenSSL Version 1.1.0" etc	2017-07-16 17:28:41 -04:00
BIO_read.pod
BIO_s_accept.pod
BIO_s_bio.pod
BIO_s_connect.pod
BIO_s_fd.pod
BIO_s_file.pod
BIO_s_mem.pod
BIO_s_null.pod
BIO_s_socket.pod
BIO_set_callback.pod
BIO_should_retry.pod	Don't use "version" in "OpenSSL Version 1.1.0" etc	2017-07-16 17:28:41 -04:00
BN_add_word.pod
BN_add.pod
BN_BLINDING_new.pod
BN_bn2bin.pod	Tweak wording to be more clear.	2017-08-23 17:33:27 -04:00
BN_cmp.pod
BN_copy.pod
BN_CTX_new.pod	Improve BN_CTX documentation	2017-07-05 12:53:28 -05:00
BN_CTX_start.pod
BN_generate_prime.pod	Less documentation for deprecated API	2017-09-02 09:35:50 -04:00
BN_mod_inverse.pod
BN_mod_mul_montgomery.pod
BN_mod_mul_reciprocal.pod
BN_new.pod
BN_num_bytes.pod
BN_rand.pod	BN_pseudo_rand is really BN_rand	2017-07-03 19:26:56 -04:00
BN_security_bits.pod	Add XXX_security_bits documentation	2017-08-09 11:25:19 -04:00
BN_set_bit.pod
BN_swap.pod
BN_zero.pod	Less documentation for deprecated API	2017-09-02 09:35:50 -04:00
BUF_MEM_new.pod
CMS_add0_cert.pod
CMS_add1_recipient_cert.pod
CMS_add1_signer.pod
CMS_compress.pod
CMS_decrypt.pod
CMS_encrypt.pod
CMS_final.pod
CMS_get0_RecipientInfos.pod
CMS_get0_SignerInfos.pod
CMS_get0_type.pod
CMS_get1_ReceiptRequest.pod
CMS_sign_receipt.pod
CMS_sign.pod
CMS_uncompress.pod
CMS_verify_receipt.pod
CMS_verify.pod
CONF_modules_free.pod	Less documentation for deprecated API	2017-09-02 09:35:50 -04:00
CONF_modules_load_file.pod
CRYPTO_get_ex_new_index.pod	Various doc fixes	2017-07-03 10:40:33 -04:00
CRYPTO_THREAD_run_once.pod
CT_POLICY_EVAL_CTX_new.pod
CTLOG_new.pod
CTLOG_STORE_get0_log_by_id.pod
CTLOG_STORE_new.pod
d2i_DHparams.pod
d2i_PKCS8PrivateKey_bio.pod
d2i_PrivateKey.pod
d2i_SSL_SESSION.pod
d2i_X509.pod	add basic references to the new methods in documentation	2017-07-26 15:04:54 -04:00
DEFINE_STACK_OF.pod
DES_random_key.pod
DH_generate_key.pod
DH_generate_parameters.pod	Fix doc-nits from previous commit	2017-09-02 17:01:29 -04:00
DH_get0_pqg.pod	Don't use "version" in "OpenSSL Version 1.1.0" etc	2017-07-16 17:28:41 -04:00
DH_get_1024_160.pod
DH_meth_new.pod	Fix typo in documents	2017-08-01 09:30:11 +10:00
DH_new.pod
DH_set_method.pod
DH_size.pod	Add XXX_security_bits documentation	2017-08-09 11:25:19 -04:00
DSA_do_sign.pod
DSA_dup_DH.pod
DSA_generate_key.pod	Less documentation for deprecated API	2017-09-02 09:35:50 -04:00
DSA_generate_parameters.pod	Fix doc-nits from previous commit	2017-09-02 17:01:29 -04:00
DSA_get0_pqg.pod	Don't use "version" in "OpenSSL Version 1.1.0" etc	2017-07-16 17:28:41 -04:00
DSA_meth_new.pod	Fix typo in documents	2017-08-01 09:30:11 +10:00
DSA_new.pod
DSA_set_method.pod
DSA_SIG_new.pod
DSA_sign.pod
DSA_size.pod	Add XXX_security_bits documentation	2017-08-09 11:25:19 -04:00
DTLS_get_data_mtu.pod
DTLS_set_timer_cb.pod	add callback handler for setting DTLS timer interval	2017-09-06 08:30:00 +02:00
DTLSv1_listen.pod
EC_GFp_simple_method.pod
EC_GROUP_copy.pod
EC_GROUP_new.pod
EC_KEY_get_enc_flags.pod
EC_KEY_new.pod
EC_POINT_add.pod
EC_POINT_new.pod
ECDSA_SIG_new.pod
ECPKParameters_print.pod
ENGINE_add.pod	Less documentation for deprecated API	2017-09-02 09:35:50 -04:00
ERR_clear_error.pod
ERR_error_string.pod
ERR_get_error.pod
ERR_GET_LIB.pod
ERR_load_crypto_strings.pod	Less documentation for deprecated API	2017-09-02 09:35:50 -04:00
ERR_load_strings.pod
ERR_print_errors.pod
ERR_put_error.pod
ERR_remove_state.pod	Less documentation for deprecated API	2017-09-02 09:35:50 -04:00
ERR_set_mark.pod
EVP_BytesToKey.pod
EVP_CIPHER_CTX_get_cipher_data.pod
EVP_CIPHER_meth_new.pod	Fix typo in documents	2017-08-01 09:30:11 +10:00
EVP_DigestInit.pod	Add EVP_DigestFinalXOF, interface to extendable-output functions, XOFs.	2017-08-12 12:20:06 +02:00
EVP_DigestSignInit.pod	Fix trivial nits in documentaion	2017-08-09 11:27:24 -04:00
EVP_DigestVerifyInit.pod	Fix trivial nits in documentaion	2017-08-09 11:27:24 -04:00
EVP_EncodeInit.pod
EVP_EncryptInit.pod	Correct GCM docs.	2017-08-23 23:54:51 +01:00
EVP_MD_meth_new.pod	Don't use "version" in "OpenSSL Version 1.1.0" etc	2017-07-16 17:28:41 -04:00
EVP_OpenInit.pod
EVP_PKEY_cmp.pod
EVP_PKEY_CTX_ctrl.pod
EVP_PKEY_CTX_new.pod
EVP_PKEY_CTX_set_hkdf_md.pod	Fix typo in HKDF example documentation	2017-08-05 20:09:22 +02:00
EVP_PKEY_CTX_set_tls1_prf_md.pod
EVP_PKEY_decrypt.pod
EVP_PKEY_derive.pod
EVP_PKEY_encrypt.pod
EVP_PKEY_get_default_digest_nid.pod
EVP_PKEY_keygen.pod	Support key check in EVP interface	2017-09-13 20:38:14 +02:00
EVP_PKEY_meth_get_count.pod	Add XXX_security_bits documentation	2017-08-09 11:25:19 -04:00
EVP_PKEY_meth_new.pod	Fix doc nits	2017-09-14 14:19:30 +08:00
EVP_PKEY_new.pod
EVP_PKEY_print_private.pod	Fix typo in documents	2017-08-01 09:30:11 +10:00
EVP_PKEY_set1_RSA.pod
EVP_PKEY_sign.pod
EVP_PKEY_verify_recover.pod
EVP_PKEY_verify.pod	Fix typo in documents	2017-08-01 09:30:11 +10:00
EVP_SealInit.pod
EVP_SignInit.pod	Add XXX_security_bits documentation	2017-08-09 11:25:19 -04:00
EVP_VerifyInit.pod
HMAC.pod	Less documentation for deprecated API	2017-09-02 09:35:50 -04:00
i2d_CMS_bio_stream.pod
i2d_PKCS7_bio_stream.pod
i2d_re_X509_tbs.pod
MD5.pod
MDC2_Init.pod
o2i_SCT_LIST.pod
OBJ_nid2obj.pod	Less documentation for deprecated API	2017-09-02 09:35:50 -04:00
OCSP_cert_to_id.pod
OCSP_request_add1_nonce.pod
OCSP_REQUEST_new.pod
OCSP_resp_find_status.pod	Add OCSP_resp_get1_id() accessor	2017-06-21 15:01:54 -04:00
OCSP_response_status.pod	Don't use "version" in "OpenSSL Version 1.1.0" etc	2017-07-16 17:28:41 -04:00
OCSP_sendreq_new.pod
OpenSSL_add_all_algorithms.pod	Less documentation for deprecated API	2017-09-02 09:35:50 -04:00
OPENSSL_Applink.pod
OPENSSL_config.pod
OPENSSL_fork_prepare.pod	Fix typo in documents	2017-08-01 09:30:11 +10:00
OPENSSL_ia32cap.pod
OPENSSL_init_crypto.pod	Fix atfork flag. Avoid double-negatives :)	2017-06-30 14:47:02 -04:00
OPENSSL_init_ssl.pod
OPENSSL_instrument_bus.pod	Use randomness not entropy	2017-06-27 12:14:49 -04:00
OPENSSL_LH_COMPFUNC.pod
OPENSSL_LH_stats.pod	Various doc fixes	2017-07-03 10:40:33 -04:00
OPENSSL_load_builtin_modules.pod
OPENSSL_malloc.pod
OPENSSL_secure_malloc.pod	Document OPENSSL_secure_clear_free	2017-07-29 19:30:39 +02:00
OPENSSL_VERSION_NUMBER.pod
OSSL_STORE_INFO.pod	STORE: Add documentation on the expectations for returned names	2017-08-15 21:37:04 +02:00
OSSL_STORE_LOADER.pod	Fix typo in documents	2017-08-01 09:30:11 +10:00
OSSL_STORE_open.pod	STORE: Add info on the expected post_process callback behavior	2017-08-15 21:37:04 +02:00
PEM_bytes_read_bio.pod
PEM_read_bio_ex.pod
PEM_read_bio_PrivateKey.pod	Various doc fixes	2017-07-03 10:40:33 -04:00
PEM_read_CMS.pod
PEM_read.pod
PEM_write_bio_CMS_stream.pod
PEM_write_bio_PKCS7_stream.pod
PKCS5_PBKDF2_HMAC.pod
PKCS7_decrypt.pod
PKCS7_encrypt.pod
PKCS7_sign_add_signer.pod
PKCS7_sign.pod
PKCS7_verify.pod
PKCS12_create.pod
PKCS12_newpass.pod
PKCS12_parse.pod
RAND_add.pod	RAND: Rename the RAND_poll_ex() callback and its typedef	2017-08-28 08:52:02 -04:00
RAND_bytes.pod	Add RAND_priv_bytes() for private keys	2017-08-03 10:45:17 -04:00
RAND_cleanup.pod	Fix doc-nits from previous commit	2017-09-02 17:01:29 -04:00
RAND_egd.pod	Rewrite RAND_egd	2017-07-12 11:09:39 -04:00
RAND_load_file.pod	Add --with-rand-seed	2017-07-22 14:00:07 -04:00
RAND_set_rand_method.pod	Update various RAND podpages	2017-07-07 23:53:54 -04:00
RC4_set_key.pod
RIPEMD160_Init.pod
RSA_blinding_on.pod
RSA_check_key.pod
RSA_generate_key.pod	Less documentation for deprecated API	2017-09-02 09:35:50 -04:00
RSA_get0_key.pod	RSA_get0_ functions permit NULL parameters	2017-08-01 18:11:40 +01:00
RSA_meth_new.pod	Fix typo in documents	2017-08-01 09:30:11 +10:00
RSA_new.pod
RSA_padding_add_PKCS1_type_1.pod	RSA_padding_check_PKCS1_type_2 is not constant time.	2017-07-18 11:16:39 +02:00
RSA_print.pod
RSA_private_encrypt.pod
RSA_public_encrypt.pod	RSA_padding_check_PKCS1_type_2 is not constant time.	2017-07-18 11:16:39 +02:00
RSA_set_method.pod
RSA_sign_ASN1_OCTET_STRING.pod
RSA_sign.pod
RSA_size.pod	Add XXX_security_bits documentation	2017-08-09 11:25:19 -04:00
SCT_new.pod
SCT_print.pod
SCT_validate.pod
SHA256_Init.pod
SMIME_read_CMS.pod
SMIME_read_PKCS7.pod
SMIME_write_CMS.pod
SMIME_write_PKCS7.pod
SSL_accept.pod
SSL_alert_type_string.pod
SSL_alloc_buffers.pod	Fix some typo and comments	2017-08-12 20:07:17 +02:00
SSL_check_chain.pod
SSL_CIPHER_get_name.pod	Rename SSL_CTX_set_early_cb to SSL_CTX_set_client_hello_cb.	2017-09-08 13:58:59 -05:00
SSL_clear.pod
SSL_COMP_add_compression_method.pod	Less documentation for deprecated API	2017-09-02 09:35:50 -04:00
SSL_CONF_cmd_argv.pod
SSL_CONF_cmd.pod	Fix some Typos and indents	2017-08-11 10:16:33 -04:00
SSL_CONF_CTX_new.pod
SSL_CONF_CTX_set1_prefix.pod
SSL_CONF_CTX_set_flags.pod
SSL_CONF_CTX_set_ssl_ctx.pod
SSL_connect.pod
SSL_CTX_add1_chain_cert.pod
SSL_CTX_add_extra_chain_cert.pod
SSL_CTX_add_session.pod
SSL_CTX_config.pod
SSL_CTX_ctrl.pod
SSL_CTX_dane_enable.pod
SSL_CTX_flush_sessions.pod
SSL_CTX_free.pod
SSL_CTX_get0_param.pod
SSL_CTX_get_verify_mode.pod
SSL_CTX_has_client_custom_ext.pod
SSL_CTX_load_verify_locations.pod
SSL_CTX_new.pod
SSL_CTX_sess_number.pod
SSL_CTX_sess_set_cache_size.pod
SSL_CTX_sess_set_get_cb.pod
SSL_CTX_sessions.pod
SSL_CTX_set0_CA_list.pod	Various doc fixes	2017-07-03 10:40:33 -04:00
SSL_CTX_set1_curves.pod
SSL_CTX_set1_sigalgs.pod
SSL_CTX_set1_verify_cert_store.pod
SSL_CTX_set_alpn_select_cb.pod
SSL_CTX_set_cert_cb.pod
SSL_CTX_set_cert_store.pod
SSL_CTX_set_cert_verify_callback.pod
SSL_CTX_set_cipher_list.pod
SSL_CTX_set_client_CA_list.pod
SSL_CTX_set_client_cert_cb.pod
SSL_CTX_set_client_hello_cb.pod	Introduce named constants for the ClientHello callback.	2017-09-08 13:58:59 -05:00
SSL_CTX_set_ct_validation_callback.pod
SSL_CTX_set_ctlog_list_file.pod
SSL_CTX_set_default_passwd_cb.pod
SSL_CTX_set_ex_data.pod
SSL_CTX_set_generate_session_id.pod
SSL_CTX_set_info_callback.pod
SSL_CTX_set_keylog_callback.pod
SSL_CTX_set_max_cert_list.pod
SSL_CTX_set_min_proto_version.pod	Provide getters for min/max proto version	2017-09-15 10:04:47 -05:00
SSL_CTX_set_mode.pod
SSL_CTX_set_msg_callback.pod
SSL_CTX_set_options.pod	Update the documentation for the new SSL_OP_ALLOW_NO_DHE_KEX option	2017-07-07 16:08:05 +01:00
SSL_CTX_set_psk_client_callback.pod	Add HISTORY and SEE ALSO sections for the new TLSv1.3 PSK functions	2017-08-31 15:02:58 +01:00
SSL_CTX_set_quiet_shutdown.pod
SSL_CTX_set_read_ahead.pod
SSL_CTX_set_record_padding_callback.pod
SSL_CTX_set_security_level.pod
SSL_CTX_set_session_cache_mode.pod
SSL_CTX_set_session_id_context.pod
SSL_CTX_set_split_send_fragment.pod
SSL_CTX_set_ssl_version.pod
SSL_CTX_set_timeout.pod
SSL_CTX_set_tlsext_servername_callback.pod	Rename SSL_CTX_set_early_cb to SSL_CTX_set_client_hello_cb.	2017-09-08 13:58:59 -05:00
SSL_CTX_set_tlsext_status_cb.pod
SSL_CTX_set_tlsext_ticket_key_cb.pod
SSL_CTX_set_tlsext_use_srtp.pod	Add documentation for SRTP functions	2017-08-24 09:34:51 +01:00
SSL_CTX_set_tmp_dh_callback.pod
SSL_CTX_set_verify.pod
SSL_CTX_use_certificate.pod
SSL_CTX_use_psk_identity_hint.pod	Add HISTORY and SEE ALSO sections for the new TLSv1.3 PSK functions	2017-08-31 15:02:58 +01:00
SSL_CTX_use_serverinfo.pod
SSL_do_handshake.pod
SSL_export_keying_material.pod	Updates following review of SSL_export_key_material() changes	2017-06-29 10:15:50 +01:00
SSL_extension_supported.pod	Don't use "version" in "OpenSSL Version 1.1.0" etc	2017-07-16 17:28:41 -04:00
SSL_free.pod
SSL_get0_peer_scts.pod
SSL_get_all_async_fds.pod
SSL_get_ciphers.pod	Tighten up SSL_get1_supported_ciphers() docs	2017-09-01 08:12:04 -05:00
SSL_get_client_CA_list.pod
SSL_get_client_random.pod	PSK related tweaks based on review feedback	2017-06-21 14:45:36 +01:00
SSL_get_current_cipher.pod	Add SSL_get_pending_cipher()	2017-08-15 10:52:21 -05:00
SSL_get_default_timeout.pod
SSL_get_error.pod	Rename SSL_CTX_set_early_cb to SSL_CTX_set_client_hello_cb.	2017-09-08 13:58:59 -05:00
SSL_get_extms_support.pod
SSL_get_fd.pod
SSL_get_peer_cert_chain.pod
SSL_get_peer_certificate.pod
SSL_get_peer_signature_nid.pod
SSL_get_psk_identity.pod	Merge Nokia copyright notice into standard	2017-06-21 08:59:18 -04:00
SSL_get_rbio.pod
SSL_get_server_tmp_key.pod
SSL_get_session.pod
SSL_get_shared_sigalgs.pod
SSL_get_SSL_CTX.pod
SSL_get_verify_result.pod
SSL_get_version.pod
SSL_in_init.pod
SSL_key_update.pod
SSL_library_init.pod
SSL_load_client_CA_file.pod
SSL_new.pod
SSL_pending.pod
SSL_read_early_data.pod	Various review fixes for PSK early_data support	2017-08-31 15:03:35 +01:00
SSL_read.pod
SSL_rstate_string.pod
SSL_SESSION_free.pod	Add an SSL_SESSION_dup() function	2017-08-09 13:37:06 +10:00
SSL_SESSION_get0_cipher.pod	Add documentation for SSL_SESSION_set_cipher()	2017-06-21 14:45:35 +01:00
SSL_SESSION_get0_hostname.pod	Various review fixes for PSK early_data support	2017-08-31 15:03:35 +01:00
SSL_SESSION_get0_id_context.pod
SSL_SESSION_get0_peer.pod
SSL_SESSION_get_compress_id.pod
SSL_SESSION_get_ex_data.pod
SSL_SESSION_get_protocol_version.pod	Document SSL_SESSION_set_protocol_version()	2017-06-21 14:45:35 +01:00
SSL_SESSION_get_time.pod
SSL_SESSION_has_ticket.pod
SSL_SESSION_is_resumable.pod	Fix some documentation typos.	2017-08-16 13:07:43 -04:00
SSL_SESSION_print.pod
SSL_session_reused.pod
SSL_SESSION_set1_id.pod
SSL_set1_host.pod
SSL_set_bio.pod	Various doc fixes	2017-07-03 10:40:33 -04:00
SSL_set_connect_state.pod	Fix a reference nit in doc	2017-07-28 11:34:55 -04:00
SSL_set_fd.pod
SSL_set_session.pod
SSL_set_shutdown.pod
SSL_set_verify_result.pod
SSL_shutdown.pod
SSL_state_string.pod
SSL_want.pod	Rename SSL_CTX_set_early_cb to SSL_CTX_set_client_hello_cb.	2017-09-08 13:58:59 -05:00
SSL_write.pod
UI_create_method.pod
UI_new.pod	Add UI functions to set result with explicit length and to retrieve the length	2017-09-08 20:06:06 +02:00
UI_STRING.pod	Add UI functions to set result with explicit length and to retrieve the length	2017-09-08 20:06:06 +02:00
UI_UTIL_read_pw.pod
X509_ALGOR_dup.pod
X509_check_ca.pod
X509_check_host.pod
X509_check_issued.pod
X509_check_private_key.pod
X509_cmp_time.pod
X509_CRL_get0_by_serial.pod
X509_digest.pod
X509_dup.pod	add basic references to the new methods in documentation	2017-07-26 15:04:54 -04:00
X509_EXTENSION_set_object.pod
X509_get0_notBefore.pod
X509_get0_signature.pod
X509_get0_uids.pod
X509_get_extension_flags.pod
X509_get_pubkey.pod
X509_get_serialNumber.pod
X509_get_subject_name.pod
X509_get_version.pod
X509_LOOKUP_hash_dir.pod
X509_NAME_add_entry_by_txt.pod
X509_NAME_ENTRY_get_object.pod
X509_NAME_get0_der.pod
X509_NAME_get_index_by_NID.pod	Various doc fixes	2017-07-03 10:40:33 -04:00
X509_NAME_print_ex.pod	Various doc fixes	2017-07-03 10:40:33 -04:00
X509_new.pod
X509_PUBKEY_new.pod
X509_SIG_get0.pod
X509_sign.pod
X509_STORE_CTX_get_error.pod
X509_STORE_CTX_new.pod
X509_STORE_CTX_set_verify_cb.pod
X509_STORE_get0_param.pod	Don't use "version" in "OpenSSL Version 1.1.0" etc	2017-07-16 17:28:41 -04:00
X509_STORE_new.pod
X509_STORE_set_verify_cb_func.pod
X509_verify_cert.pod
X509_VERIFY_PARAM_set_flags.pod	Various doc fixes	2017-07-03 10:40:33 -04:00
X509v3_get_ext_by_NID.pod
X509V3_get_d2i.pod