]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: ssl: Add ssl_new_dh_fromdata helper function
authorRemi Tricot-Le Breton <rlebreton@haproxy.com>
Fri, 11 Feb 2022 11:04:52 +0000 (12:04 +0100)
committerWilliam Lallemand <wlallemand@haproxy.org>
Mon, 14 Feb 2022 09:07:14 +0000 (10:07 +0100)
commit7f6425a130c1b34434d546741b6242dbdafb5406
tree3267d1a3e2c67a45991e9b5aa9da251696f9a623
parent5f17930572c30fb21197b7feeb529a2c114af840
MINOR: ssl: Add ssl_new_dh_fromdata helper function

Starting from OpenSSLv3, the DH_set0_pqg function is deprecated and the
use of DH objects directly is advised against so this new helper
function will be used to convert our hard-coded DH parameters into an
EVP_PKEY. It relies on the new OSSL_PARAM mechanism, as described in the
EVP_PKEY-DH manpage.
src/ssl_sock.c