Sometimes we don't need to generate ephemeral RSA keys

FreeRADIUS · Dec 31, 2014 · 4f16a3a · 4f16a3a
1 parent a2eb6ba
commit 4f16a3a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/main/tls.c b/src/main/tls.c
@@ -1057,6 +1057,8 @@ static int generate_eph_rsa_key(SSL_CTX *ctx)
 {
 	RSA *rsa;
 
+	if (!SSL_CTX_need_tmp_RSA(ctx)) return 0;
+
 	rsa = RSA_generate_key(512, RSA_F4, NULL, NULL);
 
 	if (!SSL_CTX_set_tmp_rsa(ctx, rsa)) {