Re: [Bug 55915] Add ECDHE support to tcnative-1.dll

2014-04-09 Thread Mladen Turk
On 04/09/2014 10:27 AM, Tim Whittington wrote: Does this need a SSL_CTX_set_options(c->ctx, SSL_OP_SINGLE_ECDH_USE) as well? Seems it does. Just committed a code found in mod_ssl. Regards -- ^TM - To unsubscribe, e-mail: de

Re: [Bug 55915] Add ECDHE support to tcnative-1.dll

2014-04-09 Thread Tim Whittington
Does this need a SSL_CTX_set_options(c->ctx, SSL_OP_SINGLE_ECDH_USE) as well? The API docs are pretty sparse, but it looks like mod_ssl does this (as well as nginx etc.) The description in ssl.h is “If set, always create a new key when using tmp_ecdh parameters” Reading the docs for the equival