From 72555992d16af9a1ca28ada1dc70591fb7653dfe Mon Sep 17 00:00:00 2001 From: Attila Molnar Date: Mon, 6 Jul 2015 19:03:48 +0200 Subject: m_ssl_openssl Enable ECDH when acting as a server on OpenSSL 1.0.0 and later --- src/modules/extra/m_ssl_openssl.cpp | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/modules/extra/m_ssl_openssl.cpp b/src/modules/extra/m_ssl_openssl.cpp index 6e40f97f0..684ee2180 100644 --- a/src/modules/extra/m_ssl_openssl.cpp +++ b/src/modules/extra/m_ssl_openssl.cpp @@ -49,6 +49,11 @@ /* $CompileFlags: pkgconfversion("openssl","0.9.7") pkgconfincludes("openssl","/openssl/ssl.h","") */ /* $LinkerFlags: rpath("pkg-config --libs openssl") pkgconflibs("openssl","/libssl.so","-lssl -lcrypto") */ +#if ((OPENSSL_VERSION_NUMBER >= 0x10000000L) && (!(defined(OPENSSL_NO_ECDH)))) +// OpenSSL 0.9.8 includes some ECC support, but it's unfinished. Enable only for 1.0.0 and later. +#define INSPIRCD_OPENSSL_ENABLE_ECDH +#endif + enum issl_status { ISSL_NONE, ISSL_HANDSHAKING, ISSL_OPEN }; static bool SelfSigned = false; -- cgit v1.2.3