aboutsummaryrefslogtreecommitdiffstats
path: root/doc/tls.rst
diff options
context:
space:
mode:
authorlloyd <[email protected]>2013-03-21 13:59:24 +0000
committerlloyd <[email protected]>2013-03-21 13:59:24 +0000
commit8a664104ab7d712783223fa4a2abb9ac675243be (patch)
treea0a7377d64e310629783dd8b8782b2e6fccf2565 /doc/tls.rst
parent45f384ec0b4848a73bfd9c23bd2ec657e21ee299 (diff)
Add TLS::Policy::server_uses_own_ciphersuite_preferences()
Previously the server always took its most-preferred cipher out of the client's list, but this policy allows telling a server to follow the client's preferences insetad.
Diffstat (limited to 'doc/tls.rst')
-rw-r--r--doc/tls.rst16
1 files changed, 14 insertions, 2 deletions
diff --git a/doc/tls.rst b/doc/tls.rst
index 83503fcb1..406b94d93 100644
--- a/doc/tls.rst
+++ b/doc/tls.rst
@@ -526,17 +526,24 @@ be negotiated during a handshake.
Default: "secp521r1", "secp384r1", "secp256r1",
"secp256k1", "secp224r1", "secp224k1"
- Also allowed: "secp192r1", "secp192k1", "secp160r2", "secp160r1", "secp160k1"
+ Also allowed: "secp192r1", "secp192k1", "secp160r2", "secp160r1",
+ "secp160k1"
.. cpp:function:: std::vector<byte> compression() const
Return the list of compression methods we are willing to use, in order of
- preference.
+ preference. Default is null compression only.
.. note::
TLS compression is not currently supported.
+ .. cpp:function:: bool server_uses_own_ciphersuite_preferences() const
+
+ If this returns true, a server will pick the cipher it prefers the
+ most out of the client's list. Otherwise, it will negotiate the
+ first cipher in the client's ciphersuite list that it supports.
+
.. cpp:function:: bool negotiate_heartbeat_support() const
If this function returns true, clients will offer the heartbeat
@@ -545,6 +552,11 @@ be negotiated during a handshake.
support and servers will ignore clients offering heartbeat
support.
+ If this returns true, callers should expect to handle heartbeat
+ data in their ``proc_fn``.
+
+ Default
+
.. cpp:function:: bool allow_server_initiated_renegotiation() const
If this function returns true, a client will accept a