[PATCH] SSL: support automatic selection of ECDH temporary key parameters

Piotr Sikora piotr at cloudflare.com
Tue Apr 15 19:44:37 UTC 2014


Hey Maxim,

>> - If nginx was compiled with OpenSSL 1.0.2, but used with an
>>   older version, things will not work at all; this is not something
>>   completely unacceptable, but it's something we may want to
>>   avoid.
>
> Will look into it.

How about adding check to make sure that OpenSSL version nginx was
built against (i.e. version info from the headers) matches the version
from the library we're loading (i.e. version info from the runtime)?

Best regards,
Piotr Sikora



More information about the nginx-devel mailing list