From 2c1d085f7eb5453e4fb95d057e86c38c946db67c Mon Sep 17 00:00:00 2001 From: jsing <> Date: Fri, 7 Jan 2022 16:45:06 +0000 Subject: Rename dh_tmp to dhe_params. Support for non-ephemeral DH was removed a long time ago - as such, the dh_tmp and dh_tmp_cb are used for DHE parameters. Rename them to reflect reality. ok inoguchi@ tb@ --- src/lib/libssl/ssl_lib.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) (limited to 'src/lib/libssl/ssl_lib.c') diff --git a/src/lib/libssl/ssl_lib.c b/src/lib/libssl/ssl_lib.c index a0d3d05775..4fe7fb58dc 100644 --- a/src/lib/libssl/ssl_lib.c +++ b/src/lib/libssl/ssl_lib.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_lib.c,v 1.280 2021/12/04 14:03:22 jsing Exp $ */ +/* $OpenBSD: ssl_lib.c,v 1.281 2022/01/07 16:45:06 jsing Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -2198,7 +2198,8 @@ ssl_set_cert_masks(CERT *c, const SSL_CIPHER *cipher) mask_a = SSL_aNULL | SSL_aTLS1_3; mask_k = SSL_kECDHE | SSL_kTLS1_3; - if (c->dh_tmp != NULL || c->dh_tmp_cb != NULL || c->dh_tmp_auto != 0) + if (c->dhe_params != NULL || c->dhe_params_cb != NULL || + c->dhe_params_auto != 0) mask_k |= SSL_kDHE; cpk = &(c->pkeys[SSL_PKEY_ECC]); @@ -2324,7 +2325,7 @@ ssl_dhe_params_auto_key_bits(SSL *s) CERT_PKEY *cpk; int key_bits; - if (s->cert->dh_tmp_auto == 2) { + if (s->cert->dhe_params_auto == 2) { key_bits = 1024; } else if (S3I(s)->hs.cipher->algorithm_auth & SSL_aNULL) { key_bits = 1024; -- cgit v1.2.3-55-g6feb