commit 6924ef8b12ad6f935bb5287ff4b2ae17bdbbf928
author Emeric Brun <ebrun@exceliance.fr> Wed Mar 06 14:08:53 2013 +0100
committer Willy Tarreau <w@1wt.eu> Wed Mar 06 19:08:26 2013 +0100
tree 935c6fe7c785fec0130f358b6e6d7353c0ee7a50
parent e4c58c89f6e657397beeff1b394f7567241a71b7

BUG/MEDIUM: ssl: ECDHE ciphers not usable without named curve configured.

Fix consists to use prime256v1 as default named curve to init ECDHE ciphers if none configured.

include/common/defaults.h

diff --git a/include/common/defaults.h b/include/common/defaults.h
index 9b54276..a247faf 100644
--- a/include/common/defaults.h
+++ b/include/common/defaults.h
@@ -191,6 +191,11 @@
 #define LISTEN_DEFAULT_CIPHERS NULL
 #endif
 
+/* named curve used as defaults for ECDHE ciphers */
+#ifndef ECDHE_DEFAULT_CURVE
+#define ECDHE_DEFAULT_CURVE "prime256v1"
+#endif
+
 /* ssl cache size */
 #ifndef SSLCACHESIZE
 #define SSLCACHESIZE 20000