commit | 55d7e782eec37e5e90f0dd36f957ef9a0fc74b96 | [log] [tgz] |
---|---|---|
author | Remi Tricot-Le Breton <rlebreton@haproxy.com> | Fri Feb 11 12:04:54 2022 +0100 |
committer | William Lallemand <wlallemand@haproxy.org> | Mon Feb 14 10:07:14 2022 +0100 |
tree | 85848dca776444f3fa552e2b5b78a615efd9693e | |
parent | bed72631f97d141c8878392a7441fde56192f103 [diff] |
MINOR: ssl: Set default dh size to 2048 Starting from OpenSSLv3, we won't rely on the SSL_CTX_set_tmp_dh_callback mechanism so we will need to know the DH size we want to use during init. In order for the default DH param size to be used when no RSA or DSA private key can be found for a given bind line, we will need to know the default size we want to use (which was not possible the way the code was built, since the global default dh size was set too late.