Re: [openssl-users] Suggested way to add option to both SSL_CTX* and SSL*?

2015-06-22 Thread Dr. Stephen Henson
On Mon, Jun 22, 2015, Salz, Rich wrote: > > > I looked at how SSL_CTX_set_cipher_list and SSL_set_cipher_list operate, > > but they don't use SSL_{CTX}_ctrl. > > That API probably predates the ctrl. It's a trade-off; you lose type-safety > but have less to document :) > > > What is the sugges

Re: [openssl-users] Suggested way to add option to both SSL_CTX* and SSL*?

2015-06-21 Thread Salz, Rich
> I looked at how SSL_CTX_set_cipher_list and SSL_set_cipher_list operate, > but they don't use SSL_{CTX}_ctrl. That API probably predates the ctrl. It's a trade-off; you lose type-safety but have less to document :) > What is the suggested way to control the functionality through a flag? Pro

[openssl-users] Suggested way to add option to both SSL_CTX* and SSL*?

2015-06-21 Thread Jeffrey Walton
I need to add some functionality to the SSL portion of the library. I need to control when the functionality is enabled, and I was going to control it with a flag. (Existing behavior by default; option to enable behavior on SSL_CTX*; option to override on SSL*). I thought a SSL_CTX_ctrl and SSL_ct