]> git.saurik.com Git - apple/security.git/blob - SecureTransport/privateInc/sslBuildFlags.h
Security-28.tar.gz
[apple/security.git] / SecureTransport / privateInc / sslBuildFlags.h
1 /*
2 * Copyright (c) 2000-2001 Apple Computer, Inc. All Rights Reserved.
3 *
4 * The contents of this file constitute Original Code as defined in and are
5 * subject to the Apple Public Source License Version 1.2 (the 'License').
6 * You may not use this file except in compliance with the License. Please obtain
7 * a copy of the License at http://www.apple.com/publicsource and read it before
8 * using this file.
9 *
10 * This Original Code and all software distributed under the License are
11 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
12 * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
13 * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
14 * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
15 * specific language governing rights and limitations under the License.
16 */
17
18
19 /*
20 File: sslBuildFlags.h
21
22 Contains: Common build flags
23
24 Written by: Doug Mitchell
25
26 Copyright: (c) 1999 by Apple Computer, Inc., all rights reserved.
27
28 */
29
30 #ifndef _SSL_BUILD_FLAGS_H_
31 #define _SSL_BUILD_FLAGS_H_ 1
32
33 #if defined(__cplusplus)
34 extern "C" {
35 #endif
36
37 /*
38 * This flags functional changes, within SSLRef3 source, made to
39 * accomodate the Apple SecureTransport library.
40 */
41 #define _APPLE_CDSA_ 1
42
43 /*
44 * Work around the Netscape Server Key Exchange bug. When this is
45 * true, only do server key exchange if both of the following are
46 * true:
47 *
48 * -- an export-grade ciphersuite has been negotiated, and
49 * -- an encryptPrivKey is present in the context
50 */
51 #define SSL_SERVER_KEYEXCH_HACK 1
52
53 /*
54 * RSA functions which use a public key to do encryption force
55 * the proper usage bit because the CL always gives us
56 * a pub key (from a cert) with only the verify bit set.
57 * This needs a mod to the CL to do the right thing, and that
58 * might not be enough - what if server certs don't have the
59 * appropriate usage bits?
60 */
61 #define RSA_PUB_KEY_USAGE_HACK 1
62
63 /*
64 * For now, we're assuming that the domestic CSP is available - major
65 * rework needed if it's not.
66 */
67 #define APPLE_DOMESTIC_CSP_REQUIRED 1
68
69 /* debugging flags */
70 #ifdef NDEBUG
71 #define SSL_DEBUG 0
72 #define ERROR_LOG_ENABLE 0
73 #else
74 #define SSL_DEBUG 1
75 #define ERROR_LOG_ENABLE 1
76 #endif /* NDEBUG */
77
78 #if defined(__cplusplus)
79 }
80 #endif
81
82 #endif /* _SSL_BUILD_FLAGS_H_ */