@@ -3160,6 +3160,11 @@ the `crypto`, `tls`, and `https` modules and are generally specific to OpenSSL.
3160
3160
<a href="https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_options.html">https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_options.html</a>
3161
3161
for detail.</td>
3162
3162
</tr >
3163
+ <tr >
3164
+ <td><code>SSL_OP_ALLOW_NO_DHE_KEX</code></td>
3165
+ <td>Instructs OpenSSL to allow a non-[EC]DHE-based key exchange mode
3166
+ for TLS v1.3</td>
3167
+ </tr >
3163
3168
<tr >
3164
3169
<td><code>SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION</code></td>
3165
3170
<td>Allows legacy insecure renegotiation between OpenSSL and unpatched
@@ -3232,10 +3237,18 @@ the `crypto`, `tls`, and `https` modules and are generally specific to OpenSSL.
3232
3237
<td><code>SSL_OP_NO_COMPRESSION</code></td>
3233
3238
<td>Instructs OpenSSL to disable support for SSL/TLS compression.</td>
3234
3239
</tr >
3240
+ <tr >
3241
+ <td><code>SSL_OP_NO_ENCRYPT_THEN_MAC</code></td>
3242
+ <td>Instructs OpenSSL to disable encrypt-then-MAC.</td>
3243
+ </tr >
3235
3244
<tr >
3236
3245
<td><code>SSL_OP_NO_QUERY_MTU</code></td>
3237
3246
<td></td>
3238
3247
</tr >
3248
+ <tr >
3249
+ <td><code>SSL_OP_NO_RENEGOTIATION</code></td>
3250
+ <td>Instructs OpenSSL to disable renegotiation.</td>
3251
+ </tr >
3239
3252
<tr >
3240
3253
<td><code>SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION</code></td>
3241
3254
<td>Instructs OpenSSL to always start a new session when performing
@@ -3264,6 +3277,10 @@ the `crypto`, `tls`, and `https` modules and are generally specific to OpenSSL.
3264
3277
<tr >
3265
3278
<td><code>SSL_OP_NO_TLSv1_2</code></td>
3266
3279
<td>Instructs OpenSSL to turn off TLS v1.2</td>
3280
+ </tr >
3281
+ <tr >
3282
+ <td><code>SSL_OP_NO_TLSv1_3</code></td>
3283
+ <td>Instructs OpenSSL to turn off TLS v1.3</td>
3267
3284
</tr >
3268
3285
<td><code>SSL_OP_PKCS1_CHECK_1</code></td>
3269
3286
<td></td>
@@ -3272,6 +3289,14 @@ the `crypto`, `tls`, and `https` modules and are generally specific to OpenSSL.
3272
3289
<td><code>SSL_OP_PKCS1_CHECK_2</code></td>
3273
3290
<td></td>
3274
3291
</tr >
3292
+ <tr >
3293
+ <td><code>SSL_OP_PRIORITIZE_CHACHA</code></td>
3294
+ <td>Instructs OpenSSL server to prioritize ChaCha20Poly1305
3295
+ when client does.
3296
+ This option has no effect if
3297
+ <code>SSL_OP_CIPHER_SERVER_PREFERENCE</code>
3298
+ is not enabled.</td>
3299
+ </tr >
3275
3300
<tr >
3276
3301
<td><code>SSL_OP_SINGLE_DH_USE</code></td>
3277
3302
<td>Instructs OpenSSL to always create a new key when using
0 commit comments