diff options
| author | Péter Dimitrov <[email protected]> | 2019-01-15 11:39:46 +0100 |
|---|---|---|
| committer | Péter Dimitrov <[email protected]> | 2019-01-29 11:07:56 +0100 |
| commit | 400c214337773c0dd0577e45657590c0d0e5f23c (patch) | |
| tree | 7743913e2efae55456facb6c34a77d3308fa6cca /lib/inets/src/http_server/mod_responsecontrol.erl | |
| parent | f0ea49125815ec9197ffb6c74e20ebb5f10732d4 (diff) | |
| download | otp-400c214337773c0dd0577e45657590c0d0e5f23c.tar.gz otp-400c214337773c0dd0577e45657590c0d0e5f23c.tar.bz2 otp-400c214337773c0dd0577e45657590c0d0e5f23c.zip | |
ssl: Improve openssl interop tests
openssl 1.1.x changed the default ECC curves that made testcases
fail in the ECC suite. openssl s_server and s_client sent
'Illegal Parameter' alert when the CertificateVerify (client) or
ServerKeyExchange (server) message was signed with a curve that
was not present in openssl's default ECC curve list (x25519,
secp256r1, secp521r1, secp384r1, brainpoolP256r1, brainpoolP384r1,
brainpool512r1).
This commit changes the default curve of make_ec_cert_chains to
'secp256r1' and explicitly configures the default curve in
those testcases where the default curve of the ssl application
is expected.
Change-Id: I81ebe1a30b8f863b0e2836b1dad3d8bc767cc47e
Diffstat (limited to 'lib/inets/src/http_server/mod_responsecontrol.erl')
0 files changed, 0 insertions, 0 deletions