From c7cc4e184e3ac910573aa8589ff16d69022820cc Mon Sep 17 00:00:00 2001 From: Ben Vinson Date: Wed, 12 Aug 2015 08:28:01 -0600 Subject: [PATCH] Check for OPENSSL_NO_ECDH before using ECDH --- ext/puma_http11/mini_ssl.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/ext/puma_http11/mini_ssl.c b/ext/puma_http11/mini_ssl.c index 105e6e91f1..15a59cdd8a 100644 --- a/ext/puma_http11/mini_ssl.c +++ b/ext/puma_http11/mini_ssl.c @@ -147,11 +147,13 @@ VALUE engine_init_server(VALUE self, VALUE mini_ssl_ctx) { DH *dh = get_dh1024(); SSL_CTX_set_tmp_dh(ctx, dh); +#ifndef OPENSSL_NO_ECDH EC_KEY *ecdh = EC_KEY_new_by_curve_name(NID_secp521r1); if (ecdh) { SSL_CTX_set_tmp_ecdh(ctx, ecdh); EC_KEY_free(ecdh); } +#endif ssl = SSL_new(ctx); conn->ssl = ssl;