Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SSL_CTX_set_ecdh_auto is undefined for newer openssl's #1437

Closed
vishnuutd opened this issue Aug 9, 2016 · 3 comments
Closed

SSL_CTX_set_ecdh_auto is undefined for newer openssl's #1437

vishnuutd opened this issue Aug 9, 2016 · 3 comments
Milestone
1.1.0 - initial r...

Comments

@vishnuutd
Copy link

vishnuutd commented Aug 9, 2016 •
edited
Loading

im trying to implement the sample TLS server program from

[(https://wiki.openssl.org/index.php/Simple_TLS_Server )]. im trying to implement this visual studio 2015 and i installed the master fork of openssl. Are there any solutions for this?

thanks
vishnu
@mattcaswell
Copy link
Member

It has been removed from OpenSSL 1.1.0. Here is the relevant CHANGES entry:

  *) SSL_{CTX_}set_ecdh_auto() has been removed and ECDH is support is
     always enabled now.  If you want to disable the support you should
     exclude it using the list of supported ciphers. This also means that the
     "-no_ecdhe" option has been removed from s_server.
     [Kurt Roeckx]

Perhaps we should have a no-op compatibility macro for this.

@mattcaswell mattcaswell added this to the 1.1.0 milestone Aug 10, 2016
@mattcaswell
Copy link
Member

Although one issue with a compat macro would be that SSL_CTX_set_ecdh_auto() can be used to both enable and disable support. The macro wouldn't work as expected for anyone trying to disable support. I expect 99% of uses would be for enabling though.

levitte pushed a commit that referenced this issue Aug 16, 2016
@mattcaswell
Provide compat macros for SSL_CTX_set_ecdh_auto() and SSL_set_ecdh_au…
2ecb9f2 
…to()

These functions are no longer relevant to 1.1.0 (we always have auto ecdh
on) - but no reason to break old code that tries to call it. The macros will
only return a dummy "success" result if the app was trying to enable ecdh.
Disabling can't be done in quite this way any more.

Fixes Github Issue #1437

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
@mattcaswell
Copy link
Member

I added some compat macros in 2ecb9f2.

Closing ticket.

@vlm vlm mentioned this issue Mar 5, 2017
Open
@nename0 nename0 mentioned this issue Mar 12, 2017
Closed
@extergnoto extergnoto mentioned this issue Mar 29, 2017
Closed
lighttpd-git pushed a commit to lighttpd/lighttpd1.4 that referenced this issue Jan 7, 2018
@gstrauss
[mod_openssl] elliptic curve auto selection (fixes #2833)
76b9b1f 
elliptic curve auto selection where available
openssl v1.0.2 - SSL_CTX_set_ecdh_auto()
openssl v1.1.0 - ECDH support always enabled

x-ref:
  "Using X25519 Key exchange"
  https://redmine.lighttpd.net/issues/2833

  "SSL_CTX_set_ecdh_auto is undefined for newer openssl's"
  openssl/openssl#1437
  It has been removed from OpenSSL 1.1.0.
  Here is the relevant CHANGES entry:
  *) SSL_{CTX_}set_ecdh_auto() has been removed and ECDH is support is
     always enabled now.  If you want to disable the support you should
     exclude it using the list of supported ciphers. This also means
     that the "-no_ecdhe" option has been removed from s_server.
     [Kurt Roeckx]
@CorryO CorryO mentioned this issue Jan 16, 2018
Closed
@firetwister firetwister mentioned this issue Feb 21, 2018
Closed
@dnsmichi dnsmichi mentioned this issue Jul 23, 2019
Closed
@MilanKral MilanKral mentioned this issue Aug 7, 2020
Merged
@chiouss chiouss mentioned this issue Sep 30, 2023
Merged
@hassanctech hassanctech mentioned this issue Nov 3, 2023
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
1.1.0 - initial release
Development

No branches or pull requests
2 participants
@mattcaswell @vishnuutd