diff options
| author |   jsing <jsing@openbsd.org> | 2014-10-03 13:58:17 +0000 |
|---|---|---|
| committer | jsing <jsing@openbsd.org> | 2014-10-03 13:58:17 +0000 |
| commit | 97025b677e168f0f669080544a3c37f4eab9033f (patch) | |
| tree | 4ee95d6f35b81e86c4a4da26131c2ec3955160b2 /lib/libssl/src/ssl/ssl_cert.c | |
| parent | Update ftp ressl configuration to handle recent changes in the library. (diff) | |
| download | wireguard-openbsd-97025b677e168f0f669080544a3c37f4eab9033f.tar.xz wireguard-openbsd-97025b677e168f0f669080544a3c37f4eab9033f.zip | |
Add support for automatic ephemeral EC keys.
This allows an SSL server to enable ECDHE ciphers with a single setting,
which results in an EC key being generated using the first preference
shared curve.
Based on OpenSSL with inspiration from boringssl.
ok miod@
Diffstat (limited to 'lib/libssl/src/ssl/ssl_cert.c')
| -rw-r--r-- | lib/libssl/src/ssl/ssl_cert.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/libssl/src/ssl/ssl_cert.c b/lib/libssl/src/ssl/ssl_cert.c index 6aae59e3106..6f1815067b9 100644 --- a/lib/libssl/src/ssl/ssl_cert.c +++ b/lib/libssl/src/ssl/ssl_cert.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_cert.c,v 1.41 2014/07/10 08:25:00 guenther Exp $ */ +/* $OpenBSD: ssl_cert.c,v 1.42 2014/10/03 13:58:18 jsing Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -244,6 +244,7 @@ ssl_cert_dup(CERT *cert) } } ret->ecdh_tmp_cb = cert->ecdh_tmp_cb; + ret->ecdh_tmp_auto = cert->ecdh_tmp_auto; for (i = 0; i < SSL_PKEY_NUM; i++) { if (cert->pkeys[i].x509 != NULL) { |