From a3e53d56831adb60d6875297b3339a4251f735d2 Mon Sep 17 00:00:00 2001 From: Todd Short Date: Wed, 8 Sep 2021 16:23:04 -0400 Subject: Add TFO support to socket BIO and s_client/s_server Supports Linux, MacOS and FreeBSD Disabled by default, enabled via `enabled-tfo` Some tests Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/8692) --- doc/man3/BIO_connect.pod | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'doc/man3/BIO_connect.pod') diff --git a/doc/man3/BIO_connect.pod b/doc/man3/BIO_connect.pod index 3134ccb8c3..dc9a64b040 100644 --- a/doc/man3/BIO_connect.pod +++ b/doc/man3/BIO_connect.pod @@ -73,6 +73,15 @@ port. When creating an IPv6 socket, make it only listen for IPv6 addresses and not IPv4 addresses mapped to IPv6. +=item BIO_SOCK_TFO + +Enables TCP Fast Open on the socket. Uses appropriate APIs on +supported operating systems, including Linux, macOS and FreeBSD. Can +be used with BIO_connect(), BIO_set_conn_mode(), BIO_set_bind_mode(), +and BIO_listen(). +On Linux kernels before 4.14, use BIO_set_conn_address() to specify +the peer address before starting the TLS handshake. + =back These flags are bit flags, so they are to be combined with the -- cgit v1.2.3