boringssl

Verlauf

David Benjamin dd978784d7 Always enable ecdh_auto. This is a really dumb API wart. Now that we have a limited set of curves that are all reasonable, the automatic logic should just always kick in. This makes set_ecdh_auto a no-op and, instead of making it the first choice, uses it as the fallback behavior should none of the older curve selection APIs be used. Currently, by default, server sockets can only use the plain RSA key exchange. BUG=481139 Change-Id: Iaabc82de766cd00968844a71aaac29bd59841cd4 Reviewed-on: https://boringssl-review.googlesource.com/4531 Reviewed-by: Adam Langley <agl@google.com>	vor 9 Jahren
..
openssl	Always enable ecdh_auto.	vor 9 Jahren

David Benjamin dd978784d7 Always enable ecdh_auto.

This is a really dumb API wart. Now that we have a limited set of curves that
are all reasonable, the automatic logic should just always kick in. This makes
set_ecdh_auto a no-op and, instead of making it the first choice, uses it as
the fallback behavior should none of the older curve selection APIs be used.

Currently, by default, server sockets can only use the plain RSA key exchange.

BUG=481139

Change-Id: Iaabc82de766cd00968844a71aaac29bd59841cd4
Reviewed-on: https://boringssl-review.googlesource.com/4531
Reviewed-by: Adam Langley <agl@google.com>

vor 9 Jahren

openssl

Always enable ecdh_auto.

vor 9 Jahren