]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
mod_ssl: Switch to using OpenSSL's automatic internal DH parameter
authorJoe Orton <jorton@apache.org>
Fri, 21 May 2021 09:58:14 +0000 (09:58 +0000)
committerJoe Orton <jorton@apache.org>
Fri, 21 May 2021 09:58:14 +0000 (09:58 +0000)
commit9ce47de74a7b7746107c4eced3abd5985baf690f
tree2255717348fd9bad477846a18a61273cf30a8782
parent0dbc5ca0769aa35f0b956294b2c85726d3ea6466
mod_ssl: Switch to using OpenSSL's automatic internal DH parameter
generation from OpenSSL 1.1.0 and later.  The
SSL_set_tmp_dh_callback() API is deprecated from OpenSSL 3.0 onwards.
Should not be a user-visible change (except mod_ssl gets smaller).

* modules/ssl/ssl_private.h,
  modules/ssl/ssl_engine_kernel.c,
  modules/ssl/ssl_engine_init.c (ssl_init_ctx_callbacks):
  Drop internal DH parameter generation and callback for OpenSSL 1.1+,
  use SSL_CTX_set_dh_auto(, 1) instead.

Github: closes #188
Reviewed by: rpluem

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1890067 13f79535-47bb-0310-9956-ffa450edef68
modules/ssl/ssl_engine_init.c
modules/ssl/ssl_engine_kernel.c
modules/ssl/ssl_private.h