diff options
| -rw-r--r-- | CHANGES | 4 | ||||
| -rw-r--r-- | ssl/ssl_conf.c | 8 |
2 files changed, 11 insertions, 1 deletions
@@ -9,7 +9,9 @@ Changes between 1.1.0f and 1.1.0g [xx XXX xxxx] - *) + *) Ignore the '-named_curve auto' value for compatibility of applications + with OpenSSL 1.0.2. + [Tomas Mraz <tmraz@fedoraproject.org>] Changes between 1.1.0e and 1.1.0f [25 May 2017] diff --git a/ssl/ssl_conf.c b/ssl/ssl_conf.c index 3957946092..88e4103820 100644 --- a/ssl/ssl_conf.c +++ b/ssl/ssl_conf.c @@ -221,6 +221,14 @@ static int cmd_ECDHParameters(SSL_CONF_CTX *cctx, const char *value) EC_KEY *ecdh; int nid; + /* Ignore values supported by 1.0.2 for the automatic selection */ + if ((cctx->flags & SSL_CONF_FLAG_FILE) && + strcasecmp(value, "+automatic") == 0) + return 1; + if ((cctx->flags & SSL_CONF_FLAG_CMDLINE) && + strcmp(value, "auto") == 0) + return 1; + nid = EC_curve_nist2nid(value); if (nid == NID_undef) nid = OBJ_sn2nid(value); |