Change the ecdhe curve configuration to the same way httpd is doing it.
authorclaudio <claudio@openbsd.org>
Mon, 27 Nov 2017 23:21:16 +0000 (23:21 +0000)
committerclaudio <claudio@openbsd.org>
Mon, 27 Nov 2017 23:21:16 +0000 (23:21 +0000)
commit353c00bc7c59403d9a47d99bed8ec1f844b9a4b1
treeffa0b64a816ff80aa62a24d1dc3325d131305f84
parenta7c0a3006fd6e650a5e2d1aa6e9e48a8e30486b9
Change the ecdhe curve configuration to the same way httpd is doing it.
This removes 'no ecdh' and renames 'ecdh curve auto' to ecdhe default.
The code uses now tls_config_set_ecdhecurves(3) so it is possible to
specify multiple curves now. If people specified curves in their config
they need to adjust their config now.
OK beck@
usr.sbin/relayd/config.c
usr.sbin/relayd/parse.y
usr.sbin/relayd/relay.c
usr.sbin/relayd/relayd.conf.5
usr.sbin/relayd/relayd.h