Add options to disable ciphers (#32)

To have more granular control over the ciphers we support, this change
supports selectively disabling DTLS and TLSv1.

Author: bthomee

.github/workflows/export.yml

@@ -39,6 +39,7 @@ jobs:
           conan export ed25519/all --version=2015.03
           conan export grpc/all --version=1.72.0
           conan export m4/all --version=1.4.19
+          conan export openssl/3.x.x --version=3.5.4
           conan export secp256k1/all --version=0.7.0
           conan export snappy/all --version=1.1.10
           conan export soci/all --version=4.0.3

recipes/openssl/3.x.x/conanfile.py

@@ -50,6 +50,7 @@ class OpenSSLConan(ConanFile):
         "no_dgram": [True, False],
         "no_dh": [True, False],
         "no_dsa": [True, False],
+        "no_dtls": [True, False],
         "no_dso": [True, False],
         "no_ec": [True, False],
         "no_ecdh": [True, False],
@@ -84,6 +85,9 @@ class OpenSSLConan(ConanFile):
         "no_ssl3": [True, False],
         "no_threads": [True, False],
         "no_tls1": [True, False],
+        "no_tls1_1": [True, False],
+        "no_tls1_2": [True, False],
+        "no_tls1_3": [True, False],
         "no_ts": [True, False],
         "no_whirlpool": [True, False],
         "no_zlib": [True, False],
@@ -408,7 +412,7 @@ def _configure_args(self):
         for option_name in self.default_options.keys():
             if self.options.get_safe(option_name, False) and option_name not in ("shared", "fPIC", "openssldir", "tls_security_level", "capieng_dialog", "enable_capieng", "zlib", "no_fips", "no_md2"):
                 self.output.info(f"Activated option: {option_name}")
-                args.append(option_name.replace("_", "-"))
+                args.append(option_name.replace("_", "-", 1))
         return args
 
     def generate(self):