Mercurial > hg > nginx

comparison src/stream/ngx_stream_ssl_module.c @ 6489:c256dfdd469d

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
SSL: RSA_generate_key() is deprecated in OpenSSL 1.1.0. OpenSSL removed support for all 40 and 56 bit ciphers.
author Maxim Dounin <mdounin@mdounin.ru>
date Thu, 31 Mar 2016 23:38:34 +0300
parents 4b703a5a4631
children 51e1f047d15d
comparison
equal deleted inserted replaced
6488:a57b2b8999e7 6489:c256dfdd469d
274 274
275 if (conf->prefer_server_ciphers) { 275 if (conf->prefer_server_ciphers) {
276 SSL_CTX_set_options(conf->ssl.ctx, SSL_OP_CIPHER_SERVER_PREFERENCE); 276 SSL_CTX_set_options(conf->ssl.ctx, SSL_OP_CIPHER_SERVER_PREFERENCE);
277 } 277 }
278 278
279 #ifndef LIBRESSL_VERSION_NUMBER 279 #if (OPENSSL_VERSION_NUMBER < 0x10100001L && !defined LIBRESSL_VERSION_NUMBER)
280 SSL_CTX_set_tmp_rsa_callback(conf->ssl.ctx, ngx_ssl_rsa512_key_callback); 280 SSL_CTX_set_tmp_rsa_callback(conf->ssl.ctx, ngx_ssl_rsa512_key_callback);
281 #endif 281 #endif
282 282
283 if (ngx_ssl_dhparam(cf, &conf->ssl, &conf->dhparam) != NGX_OK) { 283 if (ngx_ssl_dhparam(cf, &conf->ssl, &conf->dhparam) != NGX_OK) {
284 return NGX_CONF_ERROR; 284 return NGX_CONF_ERROR;