summaryrefslogtreecommitdiffstats
path: root/ssl/ssl_cert.c
diff options
context:
space:
mode:
authorKurt Roeckx <kurt@roeckx.be>2015-12-04 22:25:11 +0100
committerKurt Roeckx <kurt@roeckx.be>2015-12-04 22:25:11 +0100
commit6977e8ee4a718a76351ba5275a9f0be4e530eab5 (patch)
tree84cd56401bf1e8c72e12187709d4fdd5ea674677 /ssl/ssl_cert.c
parent6f78b9e824c053d062188578635c575017b587c5 (diff)
Make SSL_{CTX}_set_tmp_ecdh() call SSL_{CTX_}set1_curves()
SSL_{CTX}_set_tmp_ecdh() allows to set 1 EC curve and then tries to use it. On the other hand SSL_{CTX_}set1_curves() allows you to set a list of curves, but only when SSL_{CTX_}set_ecdh_auto() was called to turn it on. Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
Diffstat (limited to 'ssl/ssl_cert.c')
-rw-r--r--ssl/ssl_cert.c10
1 files changed, 0 insertions, 10 deletions
diff --git a/ssl/ssl_cert.c b/ssl/ssl_cert.c
index 45b1d164ba..802b1141c1 100644
--- a/ssl/ssl_cert.c
+++ b/ssl/ssl_cert.c
@@ -232,13 +232,6 @@ CERT *ssl_cert_dup(CERT *cert)
#endif
#ifndef OPENSSL_NO_EC
- if (cert->ecdh_tmp) {
- ret->ecdh_tmp = EC_KEY_dup(cert->ecdh_tmp);
- if (ret->ecdh_tmp == NULL) {
- SSLerr(SSL_F_SSL_CERT_DUP, ERR_R_EC_LIB);
- goto err;
- }
- }
ret->ecdh_tmp_auto = cert->ecdh_tmp_auto;
#endif
@@ -394,9 +387,6 @@ void ssl_cert_free(CERT *c)
#ifndef OPENSSL_NO_DH
DH_free(c->dh_tmp);
#endif
-#ifndef OPENSSL_NO_EC
- EC_KEY_free(c->ecdh_tmp);
-#endif
ssl_cert_clear_certs(c);
OPENSSL_free(c->conf_sigalgs);