diff options
| author | jsing <> | 2020-04-19 17:05:55 +0000 |
|---|---|---|
| committer | jsing <> | 2020-04-19 17:05:55 +0000 |
| commit | fab181bd11bd26ebdc8c777b21768f05fcc6d7e1 (patch) | |
| tree | b9b4bc0e1b50226405d0c80a0a502fc728b01ecc /src/lib/libssl/tls13_client.c | |
| parent | 9718effc62246fbcc4eadcd78c209f7cdb9cbb1c (diff) | |
| download | openbsd-fab181bd11bd26ebdc8c777b21768f05fcc6d7e1.tar.gz openbsd-fab181bd11bd26ebdc8c777b21768f05fcc6d7e1.tar.bz2 openbsd-fab181bd11bd26ebdc8c777b21768f05fcc6d7e1.zip | |
Add -groups option to openssl(1) s_server.
This allows supported EC groups to be configured, which will also control
which TLSv1.3 key shares we'll accept. While here, deprecate the rather
useless -named_curve option, which is effectively the same as -groups with
a single group. Also stop setting a single default group of P-256 via
SSL_CTX_set_tmp_ecdh() - use the library defaults instead.
ok beck@ inoguchi@
Diffstat (limited to 'src/lib/libssl/tls13_client.c')
0 files changed, 0 insertions, 0 deletions