@@ -3160,6 +3160,11 @@ the `crypto`, `tls`, and `https` modules and are generally specific to OpenSSL.
31603160 <a href="https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_options.html">https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_options.html</a>
31613161 for detail.</td>
31623162 </tr >
3163+ <tr >
3164+ <td><code>SSL_OP_ALLOW_NO_DHE_KEX</code></td>
3165+ <td>Instructs OpenSSL to allow a non-[EC]DHE-based key exchange mode
3166+ for TLS v1.3</td>
3167+ </tr >
31633168 <tr >
31643169 <td><code>SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION</code></td>
31653170 <td>Allows legacy insecure renegotiation between OpenSSL and unpatched
@@ -3232,10 +3237,18 @@ the `crypto`, `tls`, and `https` modules and are generally specific to OpenSSL.
32323237 <td><code>SSL_OP_NO_COMPRESSION</code></td>
32333238 <td>Instructs OpenSSL to disable support for SSL/TLS compression.</td>
32343239 </tr >
3240+ <tr >
3241+ <td><code>SSL_OP_NO_ENCRYPT_THEN_MAC</code></td>
3242+ <td>Instructs OpenSSL to disable encrypt-then-MAC.</td>
3243+ </tr >
32353244 <tr >
32363245 <td><code>SSL_OP_NO_QUERY_MTU</code></td>
32373246 <td></td>
32383247 </tr >
3248+ <tr >
3249+ <td><code>SSL_OP_NO_RENEGOTIATION</code></td>
3250+ <td>Instructs OpenSSL to disable renegotiation.</td>
3251+ </tr >
32393252 <tr >
32403253 <td><code>SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION</code></td>
32413254 <td>Instructs OpenSSL to always start a new session when performing
@@ -3264,6 +3277,10 @@ the `crypto`, `tls`, and `https` modules and are generally specific to OpenSSL.
32643277 <tr >
32653278 <td><code>SSL_OP_NO_TLSv1_2</code></td>
32663279 <td>Instructs OpenSSL to turn off TLS v1.2</td>
3280+ </tr >
3281+ <tr >
3282+ <td><code>SSL_OP_NO_TLSv1_3</code></td>
3283+ <td>Instructs OpenSSL to turn off TLS v1.3</td>
32673284 </tr >
32683285 <td><code>SSL_OP_PKCS1_CHECK_1</code></td>
32693286 <td></td>
@@ -3272,6 +3289,14 @@ the `crypto`, `tls`, and `https` modules and are generally specific to OpenSSL.
32723289 <td><code>SSL_OP_PKCS1_CHECK_2</code></td>
32733290 <td></td>
32743291 </tr >
3292+ <tr >
3293+ <td><code>SSL_OP_PRIORITIZE_CHACHA</code></td>
3294+ <td>Instructs OpenSSL server to prioritize ChaCha20Poly1305
3295+ when client does.
3296+ This option has no effect if
3297+ <code>SSL_OP_CIPHER_SERVER_PREFERENCE</code>
3298+ is not enabled.</td>
3299+ </tr >
32753300 <tr >
32763301 <td><code>SSL_OP_SINGLE_DH_USE</code></td>
32773302 <td>Instructs OpenSSL to always create a new key when using
0 commit comments