projects / haproxy-2.1.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f46cd6e) | patch
MEDIUM: ssl: fix detection of ephemeral diffie-hellman key exchange by using the...
authorRemi Gacogne <rgacogne[at]aquaray[dot]fr>
Thu, 12 Jun 2014 16:20:11 +0000 (18:20 +0200)
committerWilly Tarreau <w@1wt.eu>
Thu, 12 Jun 2014 18:52:41 +0000 (20:52 +0200)
commitc1eab8c96f06dc8c28086955477aafff987da6db
treecfeb43a523aa96f2245eb4c365378e81327f8a72tree | snapshot
parentf46cd6e4ec3ab1bc30d432e5fce358da5d545d12commit | diff
MEDIUM: ssl: fix detection of ephemeral diffie-hellman key exchange by using the cipher description.

In OpenSSL, the name of a cipher using ephemeral diffie-hellman for key
 exchange can start with EDH, but also DHE, EXP-EDH or EXP1024-DHE.
We work around this issue by using the cipher's description instead of
the cipher's name.
Hopefully the description is less likely to change in the future.
src/ssl_sock.c diff | blob | history
haproxy-2.1 public tree. Stable production code.