use SSL_OP_SINGLE_ECDH_USE.

This commit is contained in:
Joris Vink 2017-02-07 23:17:11 +01:00
parent 06ae4644e0
commit 4e9399d553
1 changed files with 1 additions and 0 deletions

View File

@ -281,6 +281,7 @@ kore_domain_sslstart(struct kore_domain *dom)
SSL_CTX_set_tmp_ecdh(dom->ssl_ctx, ecdh);
EC_KEY_free(ecdh);
SSL_CTX_set_options(dom->ssl_ctx, SSL_OP_SINGLE_ECDH_USE);
SSL_CTX_set_options(dom->ssl_ctx, SSL_OP_NO_COMPRESSION);
if (dom->cafile != NULL) {