Skip to content

Commit 05de01d

Browse files
bnoordhuisbnoordhuis
committed
tls: expose more openssl SSL context options
1 parent 4d05f56 commit 05de01d

1 file changed

Lines changed: 74 additions & 54 deletions

File tree

‎src/node_constants.cc‎

Lines changed: 74 additions & 54 deletions
Original file line numberDiff line numberDiff line change
@@ -853,120 +853,140 @@ void DefineConstants(Handle<Object> target) {
853853

854854
// OpenSSL SSL context options
855855

856-
#ifdef SSL_OP_NO_QUERY_MTU
857-
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_QUERY_MTU);
856+
#ifdef SSL_OP_ALL
857+
NODE_DEFINE_CONSTANT(target, SSL_OP_ALL);
858858
#endif
859859

860-
#ifdef SSL_OP_COOKIE_EXCHANGE
861-
NODE_DEFINE_CONSTANT(target, SSL_OP_COOKIE_EXCHANGE);
860+
#ifdef SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION
861+
NODE_DEFINE_CONSTANT(target, SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION);
862862
#endif
863863

864-
#ifdef SSL_OP_NO_TICKET
865-
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_TICKET);
864+
#ifdef SSL_OP_CIPHER_SERVER_PREFERENCE
865+
NODE_DEFINE_CONSTANT(target, SSL_OP_CIPHER_SERVER_PREFERENCE);
866866
#endif
867867

868-
#ifdef SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION
869-
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION);
868+
#ifdef SSL_OP_CISCO_ANYCONNECT
869+
NODE_DEFINE_CONSTANT(target, SSL_OP_CISCO_ANYCONNECT);
870870
#endif
871871

872-
#ifdef SSL_OP_SINGLE_ECDH_USE
873-
NODE_DEFINE_CONSTANT(target, SSL_OP_SINGLE_ECDH_USE);
872+
#ifdef SSL_OP_COOKIE_EXCHANGE
873+
NODE_DEFINE_CONSTANT(target, SSL_OP_COOKIE_EXCHANGE);
874874
#endif
875875

876-
#ifdef SSL_OP_SINGLE_DH_USE
877-
NODE_DEFINE_CONSTANT(target, SSL_OP_SINGLE_DH_USE);
876+
#ifdef SSL_OP_CRYPTOPRO_TLSEXT_BUG
877+
NODE_DEFINE_CONSTANT(target, SSL_OP_CRYPTOPRO_TLSEXT_BUG);
878+
#endif
879+
880+
#ifdef SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS
881+
NODE_DEFINE_CONSTANT(target, SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS);
878882
#endif
879883

880884
#ifdef SSL_OP_EPHEMERAL_RSA
881885
NODE_DEFINE_CONSTANT(target, SSL_OP_EPHEMERAL_RSA);
882886
#endif
883887

884-
#ifdef SSL_OP_CIPHER_SERVER_PREFERENCE
885-
NODE_DEFINE_CONSTANT(target, SSL_OP_CIPHER_SERVER_PREFERENCE);
888+
#ifdef SSL_OP_LEGACY_SERVER_CONNECT
889+
NODE_DEFINE_CONSTANT(target, SSL_OP_LEGACY_SERVER_CONNECT);
886890
#endif
887891

888-
#ifdef SSL_OP_TLS_ROLLBACK_BUG
889-
NODE_DEFINE_CONSTANT(target, SSL_OP_TLS_ROLLBACK_BUG);
892+
#ifdef SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER
893+
NODE_DEFINE_CONSTANT(target, SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER);
890894
#endif
891895

892-
#ifdef SSL_OP_NO_SSLv2
893-
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_SSLv2);
896+
#ifdef SSL_OP_MICROSOFT_SESS_ID_BUG
897+
NODE_DEFINE_CONSTANT(target, SSL_OP_MICROSOFT_SESS_ID_BUG);
894898
#endif
895899

896-
#ifdef SSL_OP_NO_SSLv3
897-
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_SSLv3);
900+
#ifdef SSL_OP_MSIE_SSLV2_RSA_PADDING
901+
NODE_DEFINE_CONSTANT(target, SSL_OP_MSIE_SSLV2_RSA_PADDING);
898902
#endif
899903

900-
#ifdef SSL_OP_NO_TLSv1
901-
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_TLSv1);
904+
#ifdef SSL_OP_NETSCAPE_CA_DN_BUG
905+
NODE_DEFINE_CONSTANT(target, SSL_OP_NETSCAPE_CA_DN_BUG);
902906
#endif
903907

904-
#ifdef SSL_OP_PKCS1_CHECK_1
905-
NODE_DEFINE_CONSTANT(target, SSL_OP_PKCS1_CHECK_1);
908+
#ifdef SSL_OP_NETSCAPE_CHALLENGE_BUG
909+
NODE_DEFINE_CONSTANT(target, SSL_OP_NETSCAPE_CHALLENGE_BUG);
906910
#endif
907911

908-
#ifdef SSL_OP_PKCS1_CHECK_2
909-
NODE_DEFINE_CONSTANT(target, SSL_OP_PKCS1_CHECK_2);
912+
#ifdef SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG
913+
NODE_DEFINE_CONSTANT(target, SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG);
910914
#endif
911915

912-
#ifdef SSL_OP_NETSCAPE_CA_DN_BUG
913-
NODE_DEFINE_CONSTANT(target, SSL_OP_NETSCAPE_CA_DN_BUG);
916+
#ifdef SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG
917+
NODE_DEFINE_CONSTANT(target, SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG);
914918
#endif
915919

916-
#ifdef SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG
917-
NODE_DEFINE_CONSTANT(target, SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG);
920+
#ifdef SSL_OP_NO_COMPRESSION
921+
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_COMPRESSION);
918922
#endif
919923

920-
#ifdef SSL_OP_CRYPTOPRO_TLSEXT_BUG
921-
NODE_DEFINE_CONSTANT(target, SSL_OP_CRYPTOPRO_TLSEXT_BUG);
924+
#ifdef SSL_OP_NO_QUERY_MTU
925+
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_QUERY_MTU);
922926
#endif
923927

924-
#ifdef SSL_OP_MICROSOFT_SESS_ID_BUG
925-
NODE_DEFINE_CONSTANT(target, SSL_OP_MICROSOFT_SESS_ID_BUG);
928+
#ifdef SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION
929+
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION);
926930
#endif
927931

928-
#ifdef SSL_OP_NETSCAPE_CHALLENGE_BUG
929-
NODE_DEFINE_CONSTANT(target, SSL_OP_NETSCAPE_CHALLENGE_BUG);
932+
#ifdef SSL_OP_NO_SSLv2
933+
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_SSLv2);
930934
#endif
931935

932-
#ifdef SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG
933-
NODE_DEFINE_CONSTANT(target, SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG);
936+
#ifdef SSL_OP_NO_SSLv3
937+
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_SSLv3);
934938
#endif
935939

936-
#ifdef SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG
937-
NODE_DEFINE_CONSTANT(target, SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG);
940+
#ifdef SSL_OP_NO_TICKET
941+
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_TICKET);
938942
#endif
939943

940-
#ifdef SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER
941-
NODE_DEFINE_CONSTANT(target, SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER);
944+
#ifdef SSL_OP_NO_TLSv1
945+
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_TLSv1);
942946
#endif
943947

944-
#ifdef SSL_OP_MSIE_SSLV2_RSA_PADDING
945-
NODE_DEFINE_CONSTANT(target, SSL_OP_MSIE_SSLV2_RSA_PADDING);
948+
#ifdef SSL_OP_NO_TLSv1_1
949+
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_TLSv1_1);
950+
#endif
951+
952+
#ifdef SSL_OP_NO_TLSv1_2
953+
NODE_DEFINE_CONSTANT(target, SSL_OP_NO_TLSv1_2);
954+
#endif
955+
956+
#ifdef SSL_OP_PKCS1_CHECK_1
957+
NODE_DEFINE_CONSTANT(target, SSL_OP_PKCS1_CHECK_1);
958+
#endif
959+
960+
#ifdef SSL_OP_PKCS1_CHECK_2
961+
NODE_DEFINE_CONSTANT(target, SSL_OP_PKCS1_CHECK_2);
962+
#endif
963+
964+
#ifdef SSL_OP_SINGLE_DH_USE
965+
NODE_DEFINE_CONSTANT(target, SSL_OP_SINGLE_DH_USE);
966+
#endif
967+
968+
#ifdef SSL_OP_SINGLE_ECDH_USE
969+
NODE_DEFINE_CONSTANT(target, SSL_OP_SINGLE_ECDH_USE);
946970
#endif
947971

948972
#ifdef SSL_OP_SSLEAY_080_CLIENT_DH_BUG
949973
NODE_DEFINE_CONSTANT(target, SSL_OP_SSLEAY_080_CLIENT_DH_BUG);
950974
#endif
951975

952-
#ifdef SSL_OP_TLS_D5_BUG
953-
NODE_DEFINE_CONSTANT(target, SSL_OP_TLS_D5_BUG);
976+
#ifdef SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG
977+
NODE_DEFINE_CONSTANT(target, SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG);
954978
#endif
955979

956980
#ifdef SSL_OP_TLS_BLOCK_PADDING_BUG
957981
NODE_DEFINE_CONSTANT(target, SSL_OP_TLS_BLOCK_PADDING_BUG);
958982
#endif
959983

960-
#ifdef SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS
961-
NODE_DEFINE_CONSTANT(target, SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS);
962-
#endif
963-
964-
#ifdef SSL_OP_ALL
965-
NODE_DEFINE_CONSTANT(target, SSL_OP_ALL);
984+
#ifdef SSL_OP_TLS_D5_BUG
985+
NODE_DEFINE_CONSTANT(target, SSL_OP_TLS_D5_BUG);
966986
#endif
967987

968-
#ifdef SSL_OP_LEGACY_SERVER_CONNECT
969-
NODE_DEFINE_CONSTANT(target, SSL_OP_LEGACY_SERVER_CONNECT);
988+
#ifdef SSL_OP_TLS_ROLLBACK_BUG
989+
NODE_DEFINE_CONSTANT(target, SSL_OP_TLS_ROLLBACK_BUG);
970990
#endif
971991

972992
#ifdef OPENSSL_NPN_NEGOTIATED

0 commit comments

Comments
 (0)