bcollet/socat
1
0
Fork 0
mirror of https://repo.or.cz/socat.git synced 2025-07-30 06:02:56 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Added OpenSSL server side EDHCE cipher support

Browse source
This commit is contained in:
Gerhard Rieger 2015-01-23 17:31:14 +01:00
parent c65a1c9791
commit 053c4565b3
2 changed files with 28 additions and 3 deletions

22
xio-openssl.c
View file

@ -960,6 +960,28 @@ int
}
}
{
/* see http://openssl.6102.n7.nabble.com/Problem-with-cipher-suite-ECDHE-ECDSA-AES256-SHA384-td42229.html */
int nid;
EC_KEY *ecdh;
#if 0
nid = OBJ_sn2nid(ECDHE_CURVE);
if (nid == NID_undef) {
Error("openssl: failed to set ECDHE parameters");
return -1;
}
#endif
nid = NID_X9_62_prime256v1;
ecdh = EC_KEY_new_by_curve_name(nid);
if (NULL == ecdh) {
Error("openssl: failed to set ECDHE parameters");
return -1;
}
SSL_CTX_set_tmp_ecdh(*ctx, ecdh);
}
#if OPENSSL_VERSION_NUMBER >= 0x00908000L
if (opt_compress) {
int result;