From 39a6ce205d8fd10d2764751d0e1d2d76741e424d Mon Sep 17 00:00:00 2001 From: Rosen Penev Date: Sat, 31 Mar 2018 18:37:28 -0700 Subject: [PATCH] ustream-ssl: Enable ECDHE with OpenSSL. When used with LuCI, SSLlabs complains that Forward Secrecy is not enabled and thus caps the score to a B. Signed-off-by: Rosen Penev --- ustream-openssl.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ustream-openssl.c b/ustream-openssl.c index 83f6140..2faa855 100644 --- a/ustream-openssl.c +++ b/ustream-openssl.c @@ -49,6 +49,9 @@ __ustream_ssl_context_new(bool server) return NULL; SSL_CTX_set_verify(c, SSL_VERIFY_NONE, NULL); +#ifndef OPENSSL_NO_ECDH + SSL_CTX_set_ecdh_auto(c, 1); +#endif SSL_CTX_set_quiet_shutdown(c, 1); return (void *) c; -- 2.25.1