Method SSL.Context()->configure_suite_b()

Method configure_suite_b

void configure_suite_b(int(128..)|void min_keylength, int(0..)|void strictness_level)

Description

Configure the context for Suite B compliant operation.

This restricts the context to the cipher suites specified by RFC 6460 in strict mode.

Additional suites may be enabled, but they will only be selected if a Suite B suite isn't available.

Parameter min_keylength

Minimum supported key length in bits. Either 128 or 192.

Parameter strictness_level

Allow additional suites.

(2..)	Strict mode. Allow only the Suite B suites from RFC 6460 and TLS 1.2.
1	Transitional mode. Also allow the transitional suites from RFC 5430 for use with TLS 1.0 and 1.1.
0	Permissive mode (default). Also allow other suites that conform to the minimum key length.

Note

This function is only present when Suite B compliant operation is possible (ie both elliptic curves and GCM are available).

Note

Note also that for Suite B server operation compliant certificates need to be added with add_cert().

See also

get_suites()