Mercurial > hg > nginx

comparison src/event/ngx_event_openssl.c @ 6983:3518287d995e

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
SSL: compatibility with OpenSSL master branch. The SSL_CTRL_SET_CURVES_LIST macro is removed in the OpenSSL master branch. SSL_CTX_set1_curves_list is preserved as compatibility with previous versions.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 18 Apr 2017 16:08:46 +0300
parents ac9b1df5b246
children eb5d119323d8
comparison
equal deleted inserted replaced
6982:ac9b1df5b246 6983:3518287d995e
1088 * from RFC 4492 section 5.1.1, or explicitly described curves over 1088 * from RFC 4492 section 5.1.1, or explicitly described curves over
1089 * binary fields. OpenSSL only supports the "named curves", which provide 1089 * binary fields. OpenSSL only supports the "named curves", which provide
1090 * maximum interoperability. 1090 * maximum interoperability.
1091 */ 1091 */
1092 1092
1093 #ifdef SSL_CTRL_SET_CURVES_LIST 1093 #if (defined SSL_CTX_set1_curves_list || defined SSL_CTRL_SET_CURVES_LIST)
1094 1094
1095 /* 1095 /*
1096 * OpenSSL 1.0.2+ allows configuring a curve list instead of a single 1096 * OpenSSL 1.0.2+ allows configuring a curve list instead of a single
1097 * curve previously supported. By default an internal list is used, 1097 * curve previously supported. By default an internal list is used,
1098 * with prime256v1 being preferred by server in OpenSSL 1.0.2b+ 1098 * with prime256v1 being preferred by server in OpenSSL 1.0.2b+