From 6568017658c0a7717d711086b6a1263900614243 Mon Sep 17 00:00:00 2001 From: "Alexander A. Klimov" Date: Thu, 4 Jul 2019 13:05:31 +0200 Subject: [PATCH] Use SSL_CTX_set_ecdh_auto only if available refs #7280 --- lib/base/tlsutility.cpp | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/base/tlsutility.cpp b/lib/base/tlsutility.cpp index 3bde27a7a..de289667a 100644 --- a/lib/base/tlsutility.cpp +++ b/lib/base/tlsutility.cpp @@ -74,7 +74,9 @@ static void SetupSslContext(SSL_CTX *sslContext, const String& pubkey, const Str SSL_CTX_set_session_id_context(sslContext, (const unsigned char *)"Icinga 2", 8); // Explicitly load ECC ciphers, required on el7 - https://github.com/Icinga/icinga2/issues/7247 +#ifdef SSL_CTX_set_ecdh_auto SSL_CTX_set_ecdh_auto(sslContext, 1); +#endif /* SSL_CTX_set_ecdh_auto */ if (!pubkey.IsEmpty()) { if (!SSL_CTX_use_certificate_chain_file(sslContext, pubkey.CStr())) { -- 2.40.0