[backend] allow ECDHE as cipher

We need to defind a curve for this.
openSUSE · Nov 10, 2017 · 035d09f · 035d09f
1 parent 80aa390
commit 035d09f
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/backend/BSSSL.pm b/src/backend/BSSSL.pm
@@ -45,6 +45,12 @@ sub initctx {
   if ($certfile) {
     Net::SSLeay::CTX_use_certificate_file($sslctx, $certfile, &Net::SSLeay::FILETYPE_PEM) || die("certificate $keyfile failed\n");
   }
+  if (defined &Net::SSLeay::CTX_set_tmp_ecdh) {
+    my $curve = Net::SSLeay::OBJ_txt2nid('prime256v1');
+    my $ecdh  = Net::SSLeay::EC_KEY_new_by_curve_name($curve);
+    Net::SSLeay::CTX_set_tmp_ecdh($sslctx, $ecdh);
+    Net::SSLeay::EC_KEY_free($ecdh);
+  }
 }
 
 sub freectx {