namespace

crypto.constants

namespace constants

const defaultCipherList: string
Specifies the active default cipher list used by the current Node.js process (colon-separated values).
const defaultCoreCipherList: string
Specifies the built-in default cipher list used by Node.js (colon-separated values).
const DH_CHECK_P_NOT_PRIME: number
const DH_CHECK_P_NOT_SAFE_PRIME: number
const DH_NOT_SUITABLE_GENERATOR: number
const DH_UNABLE_TO_CHECK_GENERATOR: number
const ENGINE_METHOD_ALL: number
const ENGINE_METHOD_CIPHERS: number
const ENGINE_METHOD_DH: number
const ENGINE_METHOD_DIGESTS: number
const ENGINE_METHOD_DSA: number
const ENGINE_METHOD_EC: number
const ENGINE_METHOD_NONE: number
const ENGINE_METHOD_PKEY_ASN1_METHS: number
const ENGINE_METHOD_PKEY_METHS: number
const ENGINE_METHOD_RAND: number
const ENGINE_METHOD_RSA: number
const OPENSSL_VERSION_NUMBER: number
const POINT_CONVERSION_COMPRESSED: number
const POINT_CONVERSION_HYBRID: number
const POINT_CONVERSION_UNCOMPRESSED: number
const RSA_NO_PADDING: number
const RSA_PKCS1_OAEP_PADDING: number
const RSA_PKCS1_PADDING: number
const RSA_PKCS1_PSS_PADDING: number
const RSA_PSS_SALTLEN_AUTO: number
Causes the salt length for RSA_PKCS1_PSS_PADDING to be determined automatically when verifying a signature.
const RSA_PSS_SALTLEN_DIGEST: number
Sets the salt length for RSA_PKCS1_PSS_PADDING to the digest size when signing or verifying.
const RSA_PSS_SALTLEN_MAX_SIGN: number
Sets the salt length for RSA_PKCS1_PSS_PADDING to the maximum permissible value when signing data.
const RSA_SSLV23_PADDING: number
const RSA_X931_PADDING: number
const SSL_OP_ALL: number
Applies multiple bug workarounds within OpenSSL. See https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_options.html for detail.
const SSL_OP_ALLOW_NO_DHE_KEX: number
Instructs OpenSSL to allow a non-[EC]DHE-based key exchange mode for TLS v1.3
const SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION: number
Allows legacy insecure renegotiation between OpenSSL and unpatched clients or servers. See https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_options.html.
const SSL_OP_CIPHER_SERVER_PREFERENCE: number
Attempts to use the server's preferences instead of the client's when selecting a cipher. See https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_options.html.
const SSL_OP_CISCO_ANYCONNECT: number
Instructs OpenSSL to use Cisco's version identifier of DTLS_BAD_VER.
const SSL_OP_COOKIE_EXCHANGE: number
Instructs OpenSSL to turn on cookie exchange.
const SSL_OP_CRYPTOPRO_TLSEXT_BUG: number
Instructs OpenSSL to add server-hello extension from an early version of the cryptopro draft.
const SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS: number
Instructs OpenSSL to disable a SSL 3.0/TLS 1.0 vulnerability workaround added in OpenSSL 0.9.6d.
const SSL_OP_LEGACY_SERVER_CONNECT: number
Allows initial connection to servers that do not support RI.
const SSL_OP_NO_COMPRESSION: number
Instructs OpenSSL to disable support for SSL/TLS compression.
const SSL_OP_NO_ENCRYPT_THEN_MAC: number
Instructs OpenSSL to disable encrypt-then-MAC.
const SSL_OP_NO_QUERY_MTU: number
const SSL_OP_NO_RENEGOTIATION: number
Instructs OpenSSL to disable renegotiation.
const SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION: number
Instructs OpenSSL to always start a new session when performing renegotiation.
const SSL_OP_NO_SSLv2: number
Instructs OpenSSL to turn off SSL v2
const SSL_OP_NO_SSLv3: number
Instructs OpenSSL to turn off SSL v3
const SSL_OP_NO_TICKET: number
Instructs OpenSSL to disable use of RFC4507bis tickets.
const SSL_OP_NO_TLSv1: number
Instructs OpenSSL to turn off TLS v1
const SSL_OP_NO_TLSv1_1: number
Instructs OpenSSL to turn off TLS v1.1
const SSL_OP_NO_TLSv1_2: number
Instructs OpenSSL to turn off TLS v1.2
const SSL_OP_NO_TLSv1_3: number
Instructs OpenSSL to turn off TLS v1.3
const SSL_OP_PRIORITIZE_CHACHA: number
Instructs OpenSSL server to prioritize ChaCha20-Poly1305 when the client does. This option has no effect if SSL_OP_CIPHER_SERVER_PREFERENCE is not enabled.
const SSL_OP_TLS_ROLLBACK_BUG: number
Instructs OpenSSL to disable version rollback attack detection.