kore

commit 4e9399d553b5c068a0db70d583e0e0c52626f4aa
parent 06ae4644e006e4affd10e92ca7bef4e92e528404
Author: Joris Vink <joris@coders.se>
Date:   Tue,  7 Feb 2017 23:17:11 +0100

use SSL_OP_SINGLE_ECDH_USE.

Diffstat:
src/domain.c
 | 
1
+

1 file changed, 1 insertion(+), 0 deletions(-)
diff --git a/src/domain.c b/src/domain.c
@@ -281,6 +281,7 @@ kore_domain_sslstart(struct kore_domain *dom)
 	SSL_CTX_set_tmp_ecdh(dom->ssl_ctx, ecdh);
 	EC_KEY_free(ecdh);
 
+	SSL_CTX_set_options(dom->ssl_ctx, SSL_OP_SINGLE_ECDH_USE);
 	SSL_CTX_set_options(dom->ssl_ctx, SSL_OP_NO_COMPRESSION);
 
 	if (dom->cafile != NULL) {