Mercurial > hg > nginx
comparison src/event/ngx_event_openssl.c @ 6983:3518287d995e
SSL: compatibility with OpenSSL master branch.
The SSL_CTRL_SET_CURVES_LIST macro is removed in the OpenSSL master branch.
SSL_CTX_set1_curves_list is preserved as compatibility with previous versions.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Tue, 18 Apr 2017 16:08:46 +0300 |
parents | ac9b1df5b246 |
children | eb5d119323d8 |
comparison
equal
deleted
inserted
replaced
6982:ac9b1df5b246 | 6983:3518287d995e |
---|---|
1088 * from RFC 4492 section 5.1.1, or explicitly described curves over | 1088 * from RFC 4492 section 5.1.1, or explicitly described curves over |
1089 * binary fields. OpenSSL only supports the "named curves", which provide | 1089 * binary fields. OpenSSL only supports the "named curves", which provide |
1090 * maximum interoperability. | 1090 * maximum interoperability. |
1091 */ | 1091 */ |
1092 | 1092 |
1093 #ifdef SSL_CTRL_SET_CURVES_LIST | 1093 #if (defined SSL_CTX_set1_curves_list || defined SSL_CTRL_SET_CURVES_LIST) |
1094 | 1094 |
1095 /* | 1095 /* |
1096 * OpenSSL 1.0.2+ allows configuring a curve list instead of a single | 1096 * OpenSSL 1.0.2+ allows configuring a curve list instead of a single |
1097 * curve previously supported. By default an internal list is used, | 1097 * curve previously supported. By default an internal list is used, |
1098 * with prime256v1 being preferred by server in OpenSSL 1.0.2b+ | 1098 * with prime256v1 being preferred by server in OpenSSL 1.0.2b+ |