]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Deprecate --ecdh-curve with OpenSSL 3.0 and adjust mbed TLS message
authorArne Schwabe <arne@rfc2549.org>
Tue, 19 Oct 2021 18:31:12 +0000 (20:31 +0200)
committerGert Doering <gert@greenie.muc.de>
Thu, 21 Oct 2021 13:53:06 +0000 (15:53 +0200)
commit39eb3125e4f433fc61c92321175f663f13f163e7
treefcbd9feddd86ed0ce66d033fb91cf1f1c9b4a9fd
parentbf079db4888381791308e08b1de9b87670a72c95
Deprecate --ecdh-curve with OpenSSL 3.0 and adjust mbed TLS message

OpenSSL 3.0 deprecates SSL_CTX_set_tmp_ecdh() in favour of
SSL_CTX_set1_groups(3). We already support the SSL_CTX_set1_groups
using the --tls-groups. Adjust both mbed TLS and OpenSSL 3.0 to
say that --ecdh-curve is ingored and --tls-groups should be used.

Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Max Fillinger <maximilian.fillinger@foxcrypto.com>
Message-Id: <20211019183127.614175-7-arne@rfc2549.org>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg22999.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/ssl_mbedtls.c
src/openvpn/ssl_openssl.c