]> git.ipfire.org Git - thirdparty/hostap.git/commit
OpenSSL: Add option to disable ECDHE with Suite B RSA
authorJouni Malinen <jouni@qca.qualcomm.com>
Sun, 17 Sep 2017 18:31:01 +0000 (21:31 +0300)
committerJouni Malinen <j@w1.fi>
Mon, 18 Sep 2017 09:12:48 +0000 (12:12 +0300)
commit2ed70c7586326507896022926b35f9b28ff6d8b9
tree2d04a3560681678dab76c74247468d089f51d809
parent4eb8cfe06ba9dfb7b1e8d6bf0dc387399726e164
OpenSSL: Add option to disable ECDHE with Suite B RSA

The hostapd.conf tls_flags=[SUITEB-NO-ECDH] and wpa_supplicant network
profile phase1="tls_suiteb_no_ecdh=1" can now be used to configure Suite
B RSA constraints with ECDHE disabled. This is mainly to allow
the DHE TLS cipher suite to be tested.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
hostapd/config_file.c
src/crypto/tls.h
src/crypto/tls_openssl.c
src/eap_peer/eap_tls_common.c