summaryrefslogtreecommitdiff
path: root/src/lib/libtls/tls_client.c
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--src/lib/libtls/tls_client.c10
1 files changed, 9 insertions, 1 deletions
diff --git a/src/lib/libtls/tls_client.c b/src/lib/libtls/tls_client.c
index b92490f25d..c79f462a3a 100644
--- a/src/lib/libtls/tls_client.c
+++ b/src/lib/libtls/tls_client.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: tls_client.c,v 1.42 2017/05/07 03:27:06 jsing Exp $ */ 1/* $OpenBSD: tls_client.c,v 1.43 2017/08/10 18:18:30 jsing Exp $ */
2/* 2/*
3 * Copyright (c) 2014 Joel Sing <jsing@openbsd.org> 3 * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
4 * 4 *
@@ -198,6 +198,14 @@ tls_connect_common(struct tls *ctx, const char *servername)
198 if (tls_configure_ssl_verify(ctx, ctx->ssl_ctx, SSL_VERIFY_PEER) == -1) 198 if (tls_configure_ssl_verify(ctx, ctx->ssl_ctx, SSL_VERIFY_PEER) == -1)
199 goto err; 199 goto err;
200 200
201 if (ctx->config->ecdhecurves != NULL) {
202 if (SSL_CTX_set1_groups(ctx->ssl_ctx, ctx->config->ecdhecurves,
203 ctx->config->ecdhecurves_len) != 1) {
204 tls_set_errorx(ctx, "failed to set ecdhe curves");
205 goto err;
206 }
207 }
208
201 if (SSL_CTX_set_tlsext_status_cb(ctx->ssl_ctx, tls_ocsp_verify_cb) != 1) { 209 if (SSL_CTX_set_tlsext_status_cb(ctx->ssl_ctx, tls_ocsp_verify_cb) != 1) {
202 tls_set_errorx(ctx, "ssl OCSP verification setup failure"); 210 tls_set_errorx(ctx, "ssl OCSP verification setup failure");
203 goto err; 211 goto err;