]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: ssl/sample: expose ssl_*c_curve for AWS-LC
authorDamien Claisse <d.claisse@criteo.com>
Thu, 13 Nov 2025 15:39:58 +0000 (15:39 +0000)
committerWilliam Lallemand <wlallemand@haproxy.com>
Thu, 13 Nov 2025 16:36:43 +0000 (17:36 +0100)
commit1d46c086894d4a32809aa09088414410407129ee
tree69e846ae956dc22a67c7bdae27f34fa2ffd72dd6
parentb9b158ea4cc93ce0f48c3ac92b80dc270d4dbf68
MINOR: ssl/sample: expose ssl_*c_curve for AWS-LC

The underlying SSL_get_negotiated_group function has been backported
into AWS-LC [1], so expose the feature for users of this TLS stack
as well. Note that even though it was actually added in AWS-LC 1.56.0,
we require AWSLC_API_VERSION >= 35 which was released in AWS-LC 1.57.0,
because API version wasn't incremented after this change. As the delta
is one minor version (less than two weeks), I consider this acceptable
to avoid relying on a proxy constant like TLSEXT_nid_unknown which
might be removed at some point.

[1] https://github.com/aws/aws-lc/commit/d6a37244ad8922f41f70195104b9da9f64c96202
doc/configuration.txt
src/ssl_sample.c