]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Fix OpenSSL 1.1.1 not using auto elliptic curve selection
authorArne Schwabe <arne@rfc2549.org>
Sat, 28 Mar 2020 04:08:58 +0000 (05:08 +0100)
committerGert Doering <gert@greenie.muc.de>
Wed, 15 Apr 2020 10:01:20 +0000 (12:01 +0200)
commitd8ac887c6b1b57a1953ab62058b4aed5d8c11f65
tree38d016ce577d934f3e93cc6f5f6ae6c33435d924
parent05229fb5923f43a502bf0ca731d9ba3106c259e8
Fix OpenSSL 1.1.1 not using auto elliptic curve selection

Commit 8a01147ff attempted to avoid calling the deprecated/noop
operation SSL_CTX_set_ecdh_auto by surrounding it with #ifdef.
Unfortunately, that change also made the return; that would exit
the function no longer being compiled when using OpenSSL 1.1.0+.
As consequence OpenVPN with OpenSSL 1.1.0+ would always set
secp384r1 as ecdh curve unless otherwise specified by ecdh

This patch restores the correct/previous behaviour.
Acked-by: Antonio Quartulli <antonio@openvpn.net>
Message-Id: <20200328040858.16505-1-arne@rfc2549.org>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg19630.html

Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/ssl_openssl.c