diff --git a/include/aws/io/tls_channel_handler.h b/include/aws/io/tls_channel_handler.h index e1847495b..bb0eed7d3 100644 --- a/include/aws/io/tls_channel_handler.h +++ b/include/aws/io/tls_channel_handler.h @@ -621,6 +621,13 @@ AWS_IO_API int aws_tls_ctx_options_set_alpn_list(struct aws_tls_ctx_options *opt */ AWS_IO_API void aws_tls_ctx_options_set_verify_peer(struct aws_tls_ctx_options *options, bool verify_peer); +/** + * Sets preferred TLS Cipher List + */ +AWS_IO_API void aws_tls_ctx_options_set_tls_cipher_preference( + struct aws_tls_ctx_options *options, + enum aws_tls_cipher_pref cipher_pref); + /** * Sets the minimum TLS version to allow. */ diff --git a/source/tls_channel_handler.c b/source/tls_channel_handler.c index 3a9559698..b66757745 100644 --- a/source/tls_channel_handler.c +++ b/source/tls_channel_handler.c @@ -459,6 +459,12 @@ void aws_tls_ctx_options_set_minimum_tls_version( options->minimum_tls_version = minimum_tls_version; } +void aws_tls_ctx_options_set_tls_cipher_preference( + struct aws_tls_ctx_options *options, + enum aws_tls_cipher_pref cipher_pref) { + options->cipher_pref = cipher_pref; +} + int aws_tls_ctx_options_override_default_trust_store_from_path( struct aws_tls_ctx_options *options, const char *ca_path,