Add option `SSL_OP_PREFER_NO_DHE_KEX`, allowing the server to prefer non-dhe psk...

[thirdparty/openssl.git] / include / openssl / ssl.h.in

diff --git a/include/openssl/ssl.h.in b/include/openssl/ssl.h.in
index 9f91039f8a121c3324dee7801ed49a2bd51e5534..b22522d0062bc37402f5578f0b865e96b6a3a273 100644 (file)
--- a/include/openssl/ssl.h.in
+++ b/include/openssl/ssl.h.in
@@ -426,6 +426,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */