> I looked at how SSL_CTX_set_cipher_list and SSL_set_cipher_list operate,
> but they don't use SSL_{CTX}_ctrl.
That API probably predates the ctrl. It's a trade-off; you lose type-safety but have less to document :)
> What is the suggested way to control the functionality through a flag?
Probably the _ctrl API. Problem is we're running out of bits. Let's see what drH thinks.
