[openssl-users] Suggested way to add option to both SSL_CTX* and SSL*?

[Salz, Rich]

> I looked at how SSL_CTX_set_cipher_list and SSL_set_cipher_list operate,
> but they don't use SSL_{CTX}_ctrl.

That API probably predates the ctrl.  It's a trade-off; you lose type-safety but have less to document :)

> What is the suggested way to control the functionality through a flag?

Probably the _ctrl API.  Problem is we're running out of bits.  Let's see what drH thinks.