• flypig's avatar
    [qtnetwork] Don't set temp ECDH params for OpenSSL >= 1.1.0. Fixes JB#52403 · e15a6319
    flypig authored
    In OpenSSL versions prior to 1.0.2 default EC temp key params were being
    set, but this was also happening for 1.1.0 and beyond, which was
    overruling the default auto option. This setting of the parameters has
    therefore been removed, as it was preventing some TLS 1.3 handshakes
    from completing successfully.
    
    In OpenSSL 1.0.2 support for automatic EC temporary key parameter
    selection was introduced, but had to be enabled. In 1.1.0 it became
    enabled by default and use of SSL_CTRL_SET_ECDH_AUTO was deprecated.
    
    From the 1.0.2 -> 1.1.0 changelog:
    
    "SSL_{CTX_}set_ecdh_auto() has been removed and ECDH is support is always
    enabled now. If you want to disable the support you should exclude it
    using the list of supported ciphers. This also means that the
    "-no_ecdhe" option has been removed from s_server."
    e15a6319
Name
Last commit
Last update
bin Loading commit data...
config.tests Loading commit data...
dist Loading commit data...
doc Loading commit data...
examples Loading commit data...
lib Loading commit data...
mkspecs Loading commit data...
qmake Loading commit data...
rpm Loading commit data...
src Loading commit data...
tests Loading commit data...
tools Loading commit data...
util Loading commit data...
.gitattributes Loading commit data...
.gitignore Loading commit data...
.qmake.conf Loading commit data...
.tag Loading commit data...
INSTALL Loading commit data...
LGPL_EXCEPTION.txt Loading commit data...
LICENSE.FDL Loading commit data...
LICENSE.GPLv3 Loading commit data...
LICENSE.LGPLv21 Loading commit data...
LICENSE.LGPLv3 Loading commit data...
LICENSE.PREVIEW.COMMERCIAL Loading commit data...
configure Loading commit data...
configure.bat Loading commit data...
header.BSD Loading commit data...
header.BSD-NEW Loading commit data...
header.COMM Loading commit data...
header.FDL Loading commit data...
header.LGPL-ONLY Loading commit data...
header.LGPL21 Loading commit data...
header.LGPL3 Loading commit data...
header.LGPL3-COMM Loading commit data...
qtbase.pro Loading commit data...
sync.profile Loading commit data...