SSL Parameters

The SSL parameters and the calls they are passed to are detailed in the following table. (Please refer to the Secure Sockets Layer (SSL) Parameters page for further details.)

Parameter

Description:

Description

Default value:

Default value

cipher_list

Description:

A string containing the list of ciphers for the SSL engine

Default value:

HIGH:!aNULL:!kRSA!PSK:!SRP:!MD5:!RC4

max_cert_list

Description:

maximum size allowed for the peer’s certificate chain in bytes

Default value:

102400

options

Description:

SSL options bitmask

Default value:

MCO_SSL_OP_NO_SSLv2| 
MCO_SSL_OP_NO_SSLv3| 
MCO_SSL_OP_SINGLE_DH_USE| 
MCO_SSL_OP_NO_COMPRESSION (when available)

tmp_dh

Description:

DH parameters for ephemeral DH key exchange

Default value:

NULL

verify_mode

Description:

Peer verification mode

Default value:

MCO_SSL_VERIFY_PEER|

MCO_SSL_VERIFY_FAIL_IF_
NO_PEER_CERT 

verify_depth

Description:

Maximum depth for the certificate chain verification

Default value:

100

certificate

Description:

PEM-encoded certificate

Default value:

NULL

private_key

Description:

PEM-encoded private key

Default value:

NULL

certificate_file

Description:

Path to the PEM-encoded certificate file

Default value:

NULL

private_key_file

Description:

Path to the PEM-encoded private key file

Default value:

NULL