RSA BSAFE SSL-C

Security protocol components for C

Search

Run Time Controlled Features

This section details the SSL_FEATURE options that can be used to enable/disable cipher suites at run time.

Defines

#define SSL_FEATURE_DH
 Switches on/off all cipher suites that require Diffie-Hellman. More...

#define SSL_FEATURE_DSA
 Switches on/off all cipher suites that require the Digital Signature Algorithm (DSA). More...

#define SSL_FEATURE_ALLOW_ENULL
 Switches on/off all cipher suites that require NULL encryption. More...

#define SSL_FEATURE_ALLOW_ANULL
 Switches on/off all cipher suites that require anonymous authentication. More...

#define SSL_FEATURE_ALLOW_ADH
 Switches on/off all cipher suites that require anonymous Diffie-Hellman authentication. More...


Define Documentation

#define SSL_FEATURE_ALLOW_ADH
 

Switches on/off all cipher suites that require anonymous Diffie-Hellman authentication. The feature is turned off by default. Enabling anonymous authentication allows the protocol to select cipher suites which do not authenticate the peer before transmitting data across the SSL connection. This feature may be useful for implementations where only encryption is required.

#define SSL_FEATURE_ALLOW_ANULL
 

Switches on/off all cipher suites that require anonymous authentication. The feature is turned off by default. Enabling anonymous authentication allows the protocol to select cipher suites which do not authenticate the peer before transmitting data across the SSL connection. This feature may be useful for implementations where only encryption is required.

#define SSL_FEATURE_ALLOW_ENULL
 

Switches on/off all cipher suites that require NULL encryption. The feature is turned off by default. Enabling NULL encryption allows the protocol to select cipher suites which do not encrypt the data before transmitting across the SSL connection. This feature may be useful for implementations where only authentication is required.

#define SSL_FEATURE_DH
 

Switches on/off all cipher suites that require Diffie-Hellman. The feature is turned on by default. Disabling Diffie-Hellman prevents the protocol from selecting any cipher suites that use Diffie-Hellman certificates or authentication (including ephemeral modes, but not including anonymous Diffie-Hellman mode).

#define SSL_FEATURE_DSA
 

Switches on/off all cipher suites that require the Digital Signature Algorithm (DSA). The feature is turned on by default. Disabling the DSA prevents the protocol from selecting any cipher suites that use Digital Signature Standard (DSS) authentication.


Copyright (c) 1999-2004 RSA Security Inc. All rights reserved. 050-001001-2600-000-000 - 2.6