Do not allow non-dhe kex_modes by default
authorMatt Caswell <matt@openssl.org>
Fri, 30 Jun 2017 08:41:03 +0000 (09:41 +0100)
committerMatt Caswell <matt@openssl.org>
Fri, 7 Jul 2017 15:08:05 +0000 (16:08 +0100)
commite3c0d76bc7848aae01fe9a86720d435b999f3bc1
tree7b4e014eee678d04c4bef40ccfa1da623a5c6009
parent515982154031b679f58d5e2cbd7752294779221e
Do not allow non-dhe kex_modes by default

Allow that mode to be configured if desired.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3833)
apps/apps.h
include/openssl/ssl.h
ssl/ssl_conf.c
ssl/statem/extensions_clnt.c
ssl/statem/extensions_srvr.c
test/recipes/70-test_tls13kexmodes.t