Change default curve (for compatibility with a
soon-to-be-widely-deployed implementation that doesn't support the previous default) Submitted by: Douglas Stebila
This commit is contained in:
parent
f393b7449d
commit
bcbe37b716
@ -413,7 +413,7 @@ static void sv_usage(void)
|
|||||||
#ifndef OPENSSL_NO_ECDH
|
#ifndef OPENSSL_NO_ECDH
|
||||||
BIO_printf(bio_err," -named_curve arg - Elliptic curve name to use for ephemeral ECDH keys.\n" \
|
BIO_printf(bio_err," -named_curve arg - Elliptic curve name to use for ephemeral ECDH keys.\n" \
|
||||||
" Use \"openssl ecparam -list_curves\" for all names\n" \
|
" Use \"openssl ecparam -list_curves\" for all names\n" \
|
||||||
" (default is sect163r2).\n");
|
" (default is nistp256).\n");
|
||||||
#endif
|
#endif
|
||||||
#ifdef FIONBIO
|
#ifdef FIONBIO
|
||||||
BIO_printf(bio_err," -nbio - Run with non-blocking IO\n");
|
BIO_printf(bio_err," -nbio - Run with non-blocking IO\n");
|
||||||
@ -1308,10 +1308,10 @@ bad:
|
|||||||
else
|
else
|
||||||
{
|
{
|
||||||
BIO_printf(bio_s_out,"Using default temp ECDH parameters\n");
|
BIO_printf(bio_s_out,"Using default temp ECDH parameters\n");
|
||||||
ecdh = EC_KEY_new_by_curve_name(NID_sect163r2);
|
ecdh = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
|
||||||
if (ecdh == NULL)
|
if (ecdh == NULL)
|
||||||
{
|
{
|
||||||
BIO_printf(bio_err, "unable to create curve (sect163r2)\n");
|
BIO_printf(bio_err, "unable to create curve (nistp256)\n");
|
||||||
goto end;
|
goto end;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user