tree ca1083a75cec92099045654104c6413ea49a084c
parent 292a88ce94a0d0b56252be1f89f26a31f891415d
author Remi Tricot-Le Breton <rlebreton@haproxy.com> 1644577490 +0100
committer William Lallemand <wlallemand@haproxy.org> 1644829634 +0100

MINOR: ssl: Add ssl_sock_set_tmp_dh helper function

Starting from OpenSSLv3, the SSL_CTX_set_tmp_dh function is deprecated
and it should be replaced by SSL_CTX_set0_tmp_dh_pkey, which takes an
EVP_PKEY instead of a DH parameter. Since this function is new to
OpenSSLv3 and its use requires an extra EVP_PKEY_up_ref call, we will
keep the two versions side by side, otherwise it would require to get
rid of all DH references in older OpenSSL versions as well.
This helper function is not used yet so this commit should be strictly
iso-functional, regardless of the OpenSSL version.