anonymous_namespace{dh_ecdh_config.h} Namespace Reference

Functions
constexpr bool	tls_pqc_sign_supported ()
bool	set_dh (SSL_CTX *ctx)
	Set DH paramenter for given SSL context. More...
bool	sanitize_tls_kex_list (const char *tls_kex, bool force_pqc, std::string *filtered)
	Filter a user-configured TLS key exchange list against the internal allowlist and optional PQC-only restriction. More...
bool	set_ecdh (SSL_CTX *ctx, bool force_pqc=false, const char *tls_kex=nullptr)
	Set TLS supported group details. More...

Function Documentation

sanitize_tls_kex_list()

bool anonymous_namespace{dh_ecdh_config.h}::sanitize_tls_kex_list	(	const char *	tls_kex,
		bool	force_pqc,
		std::string *	filtered
	)

Filter a user-configured TLS key exchange list against the internal allowlist and optional PQC-only restriction.

Duplicate groups are ignored.

Parameters

[in]	tls_kex	Colon-delimited TLS key exchange group list
[in]	force_pqc	Require only PQC-capable groups
[out]	filtered	Sanitized TLS key exchange group list

Returns

status of operation

Return values

false	Success
true	Rejected group supplied or no allowlisted groups remain

set_dh()

bool anonymous_namespace{dh_ecdh_config.h}::set_dh

(

SSL_CTX *

ctx

)

Set DH paramenter for given SSL context.

Parameters

[in]

ctx

SSL context

Returns

status of operation

Return values

false	Success
true	Failure

set_ecdh()

bool anonymous_namespace{dh_ecdh_config.h}::set_ecdh	(	SSL_CTX *	ctx,
		bool	force_pqc = false,
		const char *	tls_kex = nullptr
	)

Set TLS supported group details.

Parameters

[in]	ctx	SSL Context
	force_pqc	Force Post-Quantum Crypto KEX algorithms
	tls_kex	Explicit TLS key exchange group list

Returns

status of operation

Return values

false	Success
true	Error

tls_pqc_sign_supported()

constexpr bool anonymous_namespace{dh_ecdh_config.h}::tls_pqc_sign_supported ( )

constexpr