[patch] Add ECDHE support to Tomcat Native.

ecdhe.patch (text/plain), 848 bytes, created by Mike Noordermeer on 2014-02-04 22:35:18 UTC

(hide)

Description: Add ECDHE support to Tomcat Native.

Filename:

MIME Type:

Creator: Mike Noordermeer

Created: 2014-02-04 22:35:18 UTC

Size: 848 bytes

patch

obsolete

>diff -ru tomcat-native-1.1.29-src.orig/jni/native/src/sslcontext.c tomcat-native-1.1.29-src/jni/native/src/sslcontext.c >--- tomcat-native-1.1.29-src.orig/jni/native/src/sslcontext.c 2013-02-05 14:49:48.000000000 +0100 >+++ tomcat-native-1.1.29-src/jni/native/src/sslcontext.c 2014-02-04 23:03:29.000000000 +0100 >@@ -151,6 +151,11 @@ > (unsigned long)((sizeof SSL_DEFAULT_VHOST_NAME) - 1), > &(c->context_id[0]), NULL, EVP_sha1(), NULL); > if (mode) { >+ /* Set default (nistp256) elliptic curve for ephemeral ECDH keys */ >+ EC_KEY *ecdh = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1); >+ SSL_CTX_set_tmp_ecdh(c->ctx, ecdh); >+ EC_KEY_free(ecdh); >+ > SSL_CTX_set_tmp_rsa_callback(c->ctx, SSL_callback_tmp_RSA); > SSL_CTX_set_tmp_dh_callback(c->ctx, SSL_callback_tmp_DH); > } View Attachment As Diff View Attachment As Raw

This is ASF Bugzilla: the Apache Software Foundation bug system. In case of problems with the functioning of ASF Bugzilla, please contact bugzilla-admin@apache.org. Please Note: this e-mail address is only for reporting problems with ASF Bugzilla. Mail about any other subject will be silently ignored.

• • Home
  • | New
  • | Browse
  • | Search
  • |
    [?]
  • | Reports
  • | Help
  • | New Account
  • | Log In
    Remember [x]
  • | Forgot Password
    Login: [x]