[patch] sendmail-8.15.2-openssl-1.1.0-ecdhe-fix.patch

sendmail-8.15.2-openssl-1.1.0-ecdhe-fix.patch (text/plain), 571 bytes, created by Attila Tóth on 2019-01-10 07:29:16 UTC

diff --git a/sendmail/tls.c b/sendmail/tls.c
index 16cb93f..9338380 100644
--- a/sendmail/tls.c
+++ b/sendmail/tls.c
@@ -1329,13 +1329,8 @@ inittls(ctx, req, options, srv, certfile, keyfile, cacertpath, cacertfile, dhpar
 		}
 
 #if _FFR_TLS_EC
-		ecdh = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
-		if (ecdh != NULL)
-		{
-			SSL_CTX_set_options(*ctx, SSL_OP_SINGLE_ECDH_USE);
-			SSL_CTX_set_tmp_ecdh(*ctx, ecdh);
-			EC_KEY_free(ecdh);
-		}
+		SSL_CTX_set_options(*ctx, SSL_OP_SINGLE_ECDH_USE);
+		SSL_CTX_set_ecdh_auto(*ctx, 1);
 #endif /* _FFR_TLS_EC */
 
 	}