diff options
| author |   jsing <jsing@openbsd.org> | 2014-10-31 15:25:55 +0000 |
|---|---|---|
| committer | jsing <jsing@openbsd.org> | 2014-10-31 15:25:55 +0000 |
| commit | 95986511df7e213592f431d31c873ef1468ac940 (patch) | |
| tree | b763b8049dfe7b6d29298e8e146a7f9a52697865 /lib/libssl/src/ssl/ssl_cert.c | |
| parent | Even in interrupt context curproc is not NULL. (diff) | |
| download | wireguard-openbsd-95986511df7e213592f431d31c873ef1468ac940.tar.xz wireguard-openbsd-95986511df7e213592f431d31c873ef1468ac940.zip | |
Add support for automatic DH ephemeral keys.
This allows an SSL server to enable DHE ciphers with a single setting,
which results in an DH key being generated based on the server key length.
Partly based on OpenSSL.
Diffstat (limited to 'lib/libssl/src/ssl/ssl_cert.c')
| -rw-r--r-- | lib/libssl/src/ssl/ssl_cert.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/libssl/src/ssl/ssl_cert.c b/lib/libssl/src/ssl/ssl_cert.c index beea31c64bd..8adb9aa0326 100644 --- a/lib/libssl/src/ssl/ssl_cert.c +++ b/lib/libssl/src/ssl/ssl_cert.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_cert.c,v 1.43 2014/10/31 14:51:01 jsing Exp $ */ +/* $OpenBSD: ssl_cert.c,v 1.44 2014/10/31 15:25:55 jsing Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -229,6 +229,7 @@ ssl_cert_dup(CERT *cert) } } ret->dh_tmp_cb = cert->dh_tmp_cb; + ret->dh_tmp_auto = cert->dh_tmp_auto; if (cert->ecdh_tmp) { ret->ecdh_tmp = EC_KEY_dup(cert->ecdh_tmp); |