[InterNetNews/inn] 054a95: TLS support: Use OpenSSL built-in DH parameters

Julien ÉLIE noreply at github.com
Sat Oct 2 21:26:32 UTC 2021


  Branch: refs/heads/main
  Home:   https://github.com/InterNetNews/inn
  Commit: 054a953fdc172b186af7caff997f54e4d6fcfdb5
      https://github.com/InterNetNews/inn/commit/054a953fdc172b186af7caff997f54e4d6fcfdb5
  Author: Julien ÉLIE <Julien-Elie at users.noreply.github.com>
  Date:   2021-10-02 (Sat, 02 Oct 2021)

  Changed paths:
    M nnrpd/tls.c

  Log Message:
  -----------
  TLS support: Use OpenSSL built-in DH parameters

OpenSSL 3.0.0 deprecated PEM_read_bio_DHparams() and
SSL_CTX_set_tmp_dh_callback().  The approach of providing DH groups
in discouraged.  We now rely on the safe prime groups directly
provided by OpenSSL.

close #133




More information about the inn-committers mailing list