SSL services: Difference between revisions

No edit summary
No edit summary
Line 421: Line 421:
This is the "nn::ssl::sf::VerifyOption" enum. This is a bitmask.
This is the "nn::ssl::sf::VerifyOption" enum. This is a bitmask.


Originally ssl-sysmodule ([[#SetVerifyOption]]) just wrote the input field to state. With newer sysvers there's now validation for the input, with the value written to state masked with 0x3F. When [[#SetInterfaceVersion|InterfaceVersion]] is >=0x2, the low 2-bits of VerifyOption must be set, unless a state flag is set or {bool [[#SetDebugOption|DebugOption]] state flag]} is set, otherwise an error is thrown. Following that, if VerifyOption bit4 is set, then VerifyOption & 0x15 must match 0x15 otherwise an error is thrown.
Originally ssl-sysmodule ([[#SetVerifyOption]]) just wrote the input field to state. With newer sysvers there's now validation for the input, with the value written to state masked with 0x3F. When [[#SetInterfaceVersion|InterfaceVersion]] is >=0x2, the low 2-bits of VerifyOption must be set, unless {state flag for [[#OptionType]] value 2} is set or {bool [[#SetDebugOption|DebugOption]] state flag} is set, otherwise an error is thrown. Following that, if VerifyOption bit4 is set, then VerifyOption & 0x15 must match 0x15 otherwise an error is thrown.


{| class="wikitable" border="1"
{| class="wikitable" border="1"
Line 455: Line 455:
= OptionType =
= OptionType =
This is the "nn::ssl::sf::OptionType" / "nn::ssl::Connection::OptionType" enum.
This is the "nn::ssl::sf::OptionType" / "nn::ssl::Connection::OptionType" enum.
This corresponds to bool flags.
{| class="wikitable" border="1"
|-
! Value
! Description
|-
| 0 ||
|-
| 1 ||
|-
| 2 || This flag is checked by [[#VerifyOption|SetVerifyOption]].
|-
| 3 || Only available with [[#SetOption_2|SetOption]].
|}


= AlpnProtoState =
= AlpnProtoState =