Christian Heimes af51a74ade Provide getters for min/max proto version ...

OpenSSL 1.1.0 made SSL_CTX and SSL structs opaque and introduced a new
API to set the minimum and maximum protocol version for SSL_CTX with
TLS_method(). Add getters to introspect the configured versions:

  int SSL_CTX_get_min_proto_version(SSL_CTX *ctx);
  int SSL_CTX_get_max_proto_version(SSL_CTX *ctx);
  int SSL_get_min_proto_version(SSL *ssl);
  int SSL_get_max_proto_version(SSL *ssl);

NOTE: The getters do not resolv the version in case when the minimum or
maxium version are configured as '0' (meaning auto-select lowest and
highst version number).

Signed-off-by: Christian Heimes <christian@python.org>

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Ben Kaduk <kaduk@mit.edu>

(cherry picked from commit 3edabd3ccb7aac89af5a63cfb2378e33a8be05d7)

Updated for new manual page location and TLS 1.3.

(Merged from https://github.com/openssl/openssl/pull/4376)

2017-09-15 10:31:54 -05:00

..

record

Fix inconsistent check of UNSAFE_LEGACY_RENEGOTIATION

2017-05-26 11:31:32 +02:00

statem

Fix DTLS failure when used in a build which has SCTP enabled

2017-06-21 15:02:46 +01:00

bio_ssl.c

Get pointer type right in BIO_ssl_shutdown()

2017-03-07 10:05:08 -05:00

build.info

Update build.info files for auto-init/de-init

2016-02-09 15:11:38 +00:00

d1_lib.c

Ensure we are in accept state in DTLSv1_listen

2016-11-29 10:04:37 +00:00

d1_msg.c

Remove special case code for SCTP reneg handling

2017-04-25 14:04:13 +01:00

d1_srtp.c

Indent ssl/

2016-08-18 14:02:29 +02:00

methods.c

Indent ssl/

2016-08-18 14:02:29 +02:00

packet_locl.h

Indent ssl/

2016-08-18 14:02:29 +02:00

pqueue.c

Copyright consolidation 01/10

2016-05-17 14:19:19 -04:00

s3_cbc.c

Indent ssl/

2016-08-18 14:02:29 +02:00

s3_enc.c

Remove support for OPENSSL_SSL_TRACE_CRYPTO

2017-05-09 17:19:22 +01:00

s3_lib.c

Fix cipher_compare

2017-07-09 08:51:47 +02:00

s3_msg.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_asn1.c

ASN.1: adapt SSL_SESSION_ASN1 by explicitely embedding INTxx et al

2017-04-13 10:26:48 +02:00

ssl_cert.c

NO_SYS_TYPES_H isn't defined anywhere, stop using it as a guard

2017-08-25 15:51:40 +02:00

ssl_ciph.c

Fix ctype arguments.

2017-08-22 07:44:24 +10:00

ssl_conf.c

Ignore -named_curve auto value to improve backwards compatibility

2017-06-08 21:30:17 +01:00

ssl_err.c

Don't attempt to send fragments > max_send_fragment in DTLS

2017-04-25 14:04:13 +01:00

ssl_init.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_lib.c

Provide getters for min/max proto version

2017-09-15 10:31:54 -05:00

ssl_locl.h

Don't fail the connection in SSLv3 if server selects ECDHE

2017-06-21 11:17:22 +01:00

ssl_mcnf.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_rsa.c

Use the callbacks from the SSL object instead of the SSL_CTX object

2017-03-10 22:34:08 +01:00

ssl_sess.c

remove horrible pragma macro and remove __owur from SSL_CTX_add_session() declaration

2017-08-03 10:23:08 +01:00

ssl_stat.c

Fix errors in SSL_state_string_long

2017-07-31 09:08:29 -04:00

ssl_txt.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_utst.c

Copyright consolidation 01/10

2016-05-17 14:19:19 -04:00

t1_enc.c

Remove support for OPENSSL_SSL_TRACE_CRYPTO

2017-05-09 17:19:22 +01:00

t1_ext.c

Copy custom extension flags in a call to SSL_set_SSL_CTX()

2017-05-10 16:54:06 +01:00

t1_lib.c

Reorder extensions to put SigAlgs last

2017-08-16 11:58:00 -05:00

t1_reneg.c

Indent ssl/

2016-08-18 14:02:29 +02:00

t1_trce.c

Fix the names of ChaCha20-Poly1305 cipher suites in t1_trce.c.

2017-06-22 16:50:24 +01:00

tls_srp.c

Use memset to clear SRP_CTX instead of NULL and zero assignments

2017-06-08 21:04:20 +01:00