Sometimes we don't need to generate ephemeral RSA keys

diff --git a/src/main/tls.c b/src/main/tls.c
index dcaf58fd78e61d1278469d13510b3682fe139f0a..6cddce3a06b1d1ae7b837597f92a625fb9dc8afa 100644 (file)
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -1059,6 +1059,8 @@ static int generate_eph_rsa_key(SSL_CTX *ctx)
 {
        RSA *rsa;
 
+       if (!SSL_CTX_need_tmp_RSA(ctx)) return 0;
+
        rsa = RSA_generate_key(512, RSA_F4, NULL, NULL);
 
        if (!SSL_CTX_set_tmp_rsa(ctx, rsa)) {