diff options
| author | Tomas Mraz <tmraz@fedoraproject.org> | 2017-05-22 16:20:21 +0200 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2017-06-08 21:28:36 +0100 |
| commit | 1c7aa0dbf16c3389bbedd13391bb653e7a189603 (patch) | |
| tree | b3efca2c34c48508c58e1969e57093af82136680 /ssl/ssl_conf.c | |
| parent | 0b20ad127ce86b05a854f31d51d91312c86ccc74 (diff) | |
Ignore -named_curve auto value to improve backwards compatibility
Fixes #3490
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3518)
Diffstat (limited to 'ssl/ssl_conf.c')
| -rw-r--r-- | ssl/ssl_conf.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/ssl/ssl_conf.c b/ssl/ssl_conf.c index 41c7ff7d83..ab0a94ddd7 100644 --- a/ssl/ssl_conf.c +++ b/ssl/ssl_conf.c @@ -227,6 +227,14 @@ static int cmd_ECDHParameters(SSL_CONF_CTX *cctx, const char *value) EC_KEY *ecdh; int nid; + /* Ignore values supported by 1.0.2 for the automatic selection */ + if ((cctx->flags & SSL_CONF_FLAG_FILE) && + strcasecmp(value, "+automatic") == 0) + return 1; + if ((cctx->flags & SSL_CONF_FLAG_CMDLINE) && + strcmp(value, "auto") == 0) + return 1; + nid = EC_curve_nist2nid(value); if (nid == NID_undef) nid = OBJ_sn2nid(value); |