SSL_CTX_SET_OPTIONS(3ssl) OpenSSL SSL_CTX_SET_OPTIONS(3ssl) SSL_CTX_set_options SSL_set_options SSL_CTX_clear_options SSL_clear_options SSL_CTX_get_options SSL_get_options SSL_get_secure_renegotiation_support - SSL #include uint64_t SSL_CTX_set_options(SSL_CTX *ctx, uint64_t options); uint64_t SSL_set_options(SSL *ssl, uint64_t options); uint64_t SSL_CTX_clear_options(SSL_CTX *ctx, uint64_t options); uint64_t SSL_clear_options(SSL *ssl, uint64_t options); uint64_t SSL_CTX_get_options(const SSL_CTX *ctx); uint64_t SSL_get_options(const SSL *ssl); long SSL_get_secure_renegotiation_support(SSL *ssl); SSL_CTX_set_options() options ctx. ctx NULL. ! SSL_set_options() options ssl. ! SSL_CTX_clear_options() options ctx. SSL_clear_options() options ssl. SSL_CTX_get_options() ctx. SSL_get_options() ssl. SSL_get_secure_renegotiation_support() . . SSL . (|). SSL_CTX_set_options() SSL_set_options() () SSL. API () SSL_CTX_set_mode(3) SSL_set_mode(). SSL. SSL SSL_new() . ctx SSL . SSL_clear() . : SSL_OP_CRYPTOPRO_TLSEXT_BUG server-hello cryptopro GOST. CryptoPro CSP 3.x. SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS SSL 3.0/TLS 1.0 CBC SSL . . SSL_OP_SAFARI_ECDHE_ECDSA_BUG ECDHE-ECDSA Safari OS X. OS X 10.8..10.8.3 ECDHE-ECDSA. SSL_OP_TLSEXT_PADDING ClientHello 256 511 . . SSL_OP_ALL . SSL_OP_ALL . : SSL_OP_ALLOW_CLIENT_RENEGOTIATION . . SSL_OP_ALLOW_NO_DHE_KEX TLSv1.3 (ec)dhe . (forward secrecy) . SSL_OP_PREFER_NO_DHE_KEX TLSv1.3 (ec)dhe (ec)dhe. SSL_OP_ALLOW_NO_DHE_KEX . . SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION OpenSSL . SECURE RENEGOTIATION . SSL_OP_SERVER_PREFERENCE (TLS 1.2) (TLS 1.3) . SSL . SSL/TLS . SSL_OP_CIPHER_SERVER_PREFERENCE . SSL_OP_CISCO_ANYCONNECT Cisco DTLS_BAD_VER DTLSv1. DTLSv1_client_method(). SSL_OP_CLEANSE_PLAINTEXT TLS QUIC SSL . SSL_OP_CLEANSE_PLAINTEXT OPENSSL_cleanse(3) . ( SSL_free(3)). OpenSSL . SSL_read(3) SSL_peek(3) SSL_write(3). TLS . QUIC . QUIC QUIC ( ). SSL_OP_COOKIE_EXCHANGE RFC4347 4.2.1. DTLS. SSL_OP_DISABLE_TLSEXT_CA_NAMES TLS (CA Names). Windows TLS 1024 . SSL_OP_ENABLE_KTLS TLS . TLS OpenSSL . . TLS . . OpenSSL . . TLS OpenSSL. Linux 4.20. TLS OpenSSL . FIPS. SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE sendfile() KTLS. TLS . SSL_OP_ENABLE_KTLS . Linux. KTLS sendfile FreeBSD . SSL_OP_ENABLE_MIDDLEBOX_COMPAT (CCS) TLSv1.3. TLSv1.3 TLSv1.2 TLSv1.3 . CCS TLSv1.3. . SSL_clear_options(). OpenSSL . SSL_OP_IGNORE_UNEXPECTED_EOF TLS close_notify . close_notify . close_notify close_notify. TLS . SSL_shutdown(3). SSL_OP_LEGACY_SERVER_CONNECT OpenSSL . . SSL_OP_LEGACY_EC_POINT_FORMATS . ANSI X9.62 prime char2 . SSL_OP_NO_ANTI_REPLAY ( max_early_data > 0) OpenSSL . SSL_read_early_data(3) . TLSv1.3. OpenSSL . . . . SSL_OP_NO_TX_CERTIFICATE_COMPRESSION RFC8879 TLSv1.3. . SSL_OP_NO_RX_CERTIFICATE_COMPRESSION RFC8879 TLSv1.3. . SSL_OP_NO_COMPRESSION TLS . . SSL_clear_options(). TLS 2 . OpenSSL 3.2 2 . SSL_CTX_set_security_level(3). SSL_OP_NO_ENCRYPT_THEN_MAC MAC RFC7366 TLS DTLS. MAC. . SSL_OP_NO_EXTENDED_MASTER_SECRET RFC7627 TLS DTLS. . . SSL_OP_NO_QUERY_MTU MTU. DTLS. SSL_OP_NO_RENEGOTIATION (D)TLSv1.2 . HelloRequest ClientHello. SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION ( ). . SSL_OP_NO_SSLv3, SSL_OP_NO_TLSv1, SSL_OP_NO_TLSv1_1, SSL_OP_NO_TLSv1_2, SSL_OP_NO_TLSv1_3, SSL_OP_NO_DTLSv1, SSL_OP_NO_DTLSv1_2 SSLv3 TLSv1 TLSv1.1 TLSv1.2 TLSv1.3 TLS DTLSv1 DTLSv1.2 DTLS . OpenSSL 1.1.0 SSL_CTX_set_min_proto_version(3) SSL_CTX_set_max_proto_version(3) . SSL_OP_NO_TICKET SSL/TLS : . . . . "". . . - . TLSv1.3 . OpenSSL TLSv1.3: . TLSv1.2 . TLSv1.2 . . . . OpenSSL . SSL_OP_NO_TICKET . TLSv1.2 . TLSv1.3 . . TLSv1.3 ( ) SSL_CTX_set_num_tickets(3) SSL_set_num_tickets(3). SSL_OP_PRIORITIZE_CHACHA SSL_OP_SERVER_PREFERENCE ChaCha20-Poly1305 ChaCha20-Poly1305 . ( ) ChaCha20-Poly1305 AES . SSL_OP_SERVER_PREFERENCE. SSL_OP_TLS_ROLLBACK_BUG . SSL/TLS . . (: SSLv2 SSLv3.1=TLSv1 SSLv3. SSLv3.1=TLSv1. SSLv3 .) : SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER SSL_OP_SSLEAY_080_CLIENT_DH_BUG SSL_OP_TLS_D5_BUG SSL_OP_TLS_BLOCK_PADDING_BUG SSL_OP_MSIE_SSLV2_RSA_PADDING SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG SSL_OP_MICROSOFT_SESS_ID_BUG SSL_OP_NETSCAPE_CHALLENGE_BUG SSL_OP_PKCS1_CHECK_1 SSL_OP_PKCS1_CHECK_2 SSL_OP_SINGLE_DH_USE SSL_OP_SINGLE_ECDH_USE SSL_OP_EPHEMERAL_RSA SSL_OP_NETSCAPE_CA_DN_BUG SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG OpenSSL RFC5746. CVE-2009-3555 . . patched. unpatched. OpenSSL. OpenSSL. OpenSSL no_renegotiation TLS v1.0 handshake_failure SSL v3.0. OpenSSL handshake_failure. . SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION . OpenSSL SSL_OP_LEGACY_SERVER_CONNECT SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION OpenSSL . . SSL_OP_LEGACY_SERVER_CONNECT RFC 5746 CVE-2009-3555. OpenSSL SSL_OP_LEGACY_SERVER_CONNECT OpenSSL ( ) SSL_OP_LEGACY_SERVER_CONNECT SSL_CTX_clear_options() SSL_clear_options(). SSL_OP_LEGACY_SERVER_CONNECT SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION SSL_OP_LEGACY_SERVER_CONNECT OpenSSL B SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION OpenSSL . QUIC SSL QUIC: SSL_OP_ALLOW_NO_DHE_KEX SSL_OP_NO_TX_CERTIFICATE_COMPRESSION SSL_OP_NO_RX_CERTIFICATE_COMPRESSION SSL_OP_NO_TICKET SSL_OP_PRIORITIZE_CHACHA SSL QUIC: SSL_OP_CLEANSE_PLAINTEXT QUIC SSL_CTX SSL QUIC. QUIC SSL QUIC . QUIC SSL QUIC SSL QUIC ( ) . . QUIC SSL QUIC. . SSL_CTX_set_options() SSL_set_options() options. SSL_CTX_clear_options() SSL_clear_options() options. SSL_CTX_get_options() SSL_get_options() . SSL_get_secure_renegotiation_support() 1 0 . ssl(7), SSL_new(3), SSL_clear(3), SSL_shutdown(3) SSL_CTX_set_tmp_dh_callback(3), SSL_CTX_set_min_proto_version(3), openssl-dhparam(1) OpenSSL 0.9.8m. SSL_OP_PRIORITIZE_CHACHA SSL_OP_NO_RENEGOTIATION OpenSSL 1.1.1. SSL_OP_NO_EXTENDED_MASTER_SECRET SSL_OP_IGNORE_UNEXPECTED_EOF OpenSSL 3.0. SSL_OP_ "uint64_t" OpenSSL 3.0. SSL_OP_ "#if". . OpenSSL 3.6 SSL_OP_CIPHER_SERVER_PREFERENCE SSL_OP_SERVER_PREFERENCE. 2001-2025 OpenSSL. . Apache 2.0 ( ""). . LICENSE . 3 . . : . 3.6.2 7 2026 SSL_CTX_SET_OPTIONS(3ssl)