diff options
| author |   jsing <jsing@openbsd.org> | 2014-10-15 14:02:16 +0000 |
|---|---|---|
| committer | jsing <jsing@openbsd.org> | 2014-10-15 14:02:16 +0000 |
| commit | a616f9ba447927ec530a4294d62a0eea8b9a3356 (patch) | |
| tree | 77e24038f9641e0bb7b1b3f0a989059580d5ff2b /lib/libssl/ssl_lib.c | |
| parent | Add cipher aliases for DHE (the correct name for EDH) and ECDHE (the (diff) | |
| download | wireguard-openbsd-a616f9ba447927ec530a4294d62a0eea8b9a3356.tar.xz wireguard-openbsd-a616f9ba447927ec530a4294d62a0eea8b9a3356.zip | |
Only require an EC public key in tls1_set_ec_id(), if we need to provide
a compression identifier. In the case of a server using ephemeral EC keys,
the supplied key is unlikely to have a public key where
SSL_CTX_set_tmp_ecdh() is called after SSL_OP_SINGLE_ECDH_USE has been
set. This makes ECDHE ciphers work again for this use case.
Diffstat (limited to 'lib/libssl/ssl_lib.c')
0 files changed, 0 insertions, 0 deletions