1---
2c: Copyright (C) Daniel Stenberg, <daniel.se>, et al.
3SPDX-License-Identifier: curl
4Title: CURLOPT_PROXY_TLS13_CIPHERS
5Section: 3
6Source: libcurl
7See-also:
8  - CURLOPT_PROXY_SSLVERSION (3)
9  - CURLOPT_PROXY_SSL_CIPHER_LIST (3)
10  - CURLOPT_SSLVERSION (3)
11  - CURLOPT_SSL_CIPHER_LIST (3)
12  - CURLOPT_TLS13_CIPHERS (3)
13---
14
15# NAME
16
17CURLOPT_PROXY_TLS13_CIPHERS - ciphers suites for proxy TLS 1.3
18
19# SYNOPSIS
20
21~~~c
22#include <curl/curl.h>
23
24CURLcode curl_easy_setopt(CURL *handle, CURLOPT_PROXY_TLS13_CIPHERS,
25                          char *list);
26~~~
27
28# DESCRIPTION
29
30Pass a char pointer, pointing to a null-terminated string holding the list of
31cipher suites to use for the TLS 1.3 connection to a proxy. The list must be
32syntactically correct, it consists of one or more cipher suite strings
33separated by colons.
34
35Find more details about cipher lists on this URL:
36
37 https://curl.se/docs/ssl-ciphers.html
38
39This option is currently used only when curl is built to use OpenSSL 1.1.1 or
40later. If you are using a different SSL backend you can try setting TLS 1.3
41cipher suites by using the CURLOPT_PROXY_SSL_CIPHER_LIST(3) option.
42
43The application does not have to keep the string around after setting this
44option.
45
46# DEFAULT
47
48NULL, use internal default
49
50# PROTOCOLS
51
52All TLS based protocols: HTTPS, FTPS, IMAPS, POP3S, SMTPS etc.
53
54# EXAMPLE
55
56~~~c
57int main(void)
58{
59  CURL *curl = curl_easy_init();
60  if(curl) {
61    CURLcode res;
62    curl_easy_setopt(curl, CURLOPT_URL, "https://example.com/");
63    curl_easy_setopt(curl, CURLOPT_PROXY_TLS13_CIPHERS,
64                     "TLS_CHACHA20_POLY1305_SHA256");
65    res = curl_easy_perform(curl);
66    curl_easy_cleanup(curl);
67  }
68}
69~~~
70
71# AVAILABILITY
72
73Added in 7.61.0.
74Available when built with OpenSSL >= 1.1.1.
75
76# RETURN VALUE
77
78Returns CURLE_OK if supported, CURLE_NOT_BUILT_IN otherwise.
79