| commit | 5f17930572c30fb21197b7feeb529a2c114af840 | [log] [tgz] |
|---|---|---|
| author | Remi Tricot-Le Breton <rlebreton@haproxy.com> | Fri Feb 11 12:04:51 2022 +0100 |
| committer | William Lallemand <wlallemand@haproxy.org> | Mon Feb 14 10:07:14 2022 +0100 |
| tree | e6f6444d64b73fa443b505c5f993d27045e79683 | |
| parent | 846eda91bab19c63bbdcac8d46ae20f47c1edb9d [diff] |
MINOR: ssl: Add ssl_sock_set_tmp_dh_from_pkey helper function This helper function will only be used with OpenSSLv3. It simply sets in an SSL_CTX a set of DH parameters of the same size as a certificate's private key. This logic is the same as the one used with older versions, it simply relies on new APIs. If no pkey can be found the SSL_CTX_set_dh_auto function wll be called, making the SSL_CTX rely on DH parameters provided by OpenSSL in case of DHE negotiation.