83 |
|
SSL_CTX_set_cipher_list(ConfigServerInfo.tls_ctx.server_ctx, "EECDH+HIGH:EDH+HIGH:HIGH:!aNULL"); |
84 |
|
|
85 |
|
#ifndef OPENSSL_NO_ECDH |
86 |
< |
{ |
87 |
< |
EC_KEY *key = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1); |
86 |
> |
EC_KEY *key = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1); |
87 |
|
|
88 |
< |
if (key) |
89 |
< |
{ |
90 |
< |
SSL_CTX_set_tmp_ecdh(ConfigServerInfo.tls_ctx.server_ctx, key); |
91 |
< |
EC_KEY_free(key); |
93 |
< |
} |
88 |
> |
if (key) |
89 |
> |
{ |
90 |
> |
SSL_CTX_set_tmp_ecdh(ConfigServerInfo.tls_ctx.server_ctx, key); |
91 |
> |
EC_KEY_free(key); |
92 |
|
} |
93 |
|
|
94 |
|
SSL_CTX_set_options(ConfigServerInfo.tls_ctx.server_ctx, SSL_OP_SINGLE_ECDH_USE); |