Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ssl: add SSLContext#tmp_dh= #459

Merged
merged 2 commits into from
Sep 27, 2021
Merged

ssl: add SSLContext#tmp_dh= #459

merged 2 commits into from
Sep 27, 2021

Commits on Sep 23, 2021

  1. ssl: remove private method SSLSocket#tmp_ecdh_callback

    Commit ee037e1 ("ssl: remove SSL::SSLContext#tmp_ecdh_callback",
    2020-08-12) forgot to remove the method.
    rhenium committed Sep 23, 2021
    Configuration menu
    Copy the full SHA
    bef9ea8 View commit details
    Browse the repository at this point in the history

Commits on Sep 26, 2021

  1. ssl: add SSLContext#tmp_dh=

    Provide a wrapper of SSL_set0_tmp_dh_pkey()/SSL_CTX_set_tmp_dh(), which
    sets the DH parameters used for ephemeral DH key exchange.
    
    SSLContext#tmp_dh_callback= already exists for this purpose, as a
    wrapper around SSL_CTX_set_tmp_dh_callback(), but it is considered
    obsolete and the OpenSSL API is deprecated for future removal. There is
    no practical use case where an application needs to use different DH
    parameters nowadays. This was originally introduced to support export
    grade ciphers.
    
    RDoc for #tmp_dh_callback= is updated to recommend the new #tmp_dh=.
    
    Note that current versions of OpenSSL support automatic ECDHE curve
    selection which is enabled by default. SSLContext#tmp_dh= should only be
    necessary if you must allow ancient clients which don't support ECDHE.
    rhenium committed Sep 26, 2021
    Configuration menu
    Copy the full SHA
    aa43da4 View commit details
    Browse the repository at this point in the history