[mod_openssl] set SSL_OP_PRIORITIZE_CHACHA

set SSL_OP_PRIORITIZE_CHACHA, if available, when
  ssl.honor-cipher-order = "enable"
This commit is contained in:
Glenn Strauss 2020-06-06 01:02:11 -04:00
parent 7d9052c059
commit 3fbedbced2
1 changed files with 5 additions and 0 deletions

View File

@ -1741,6 +1741,11 @@ network_init_ssl (server *srv, plugin_config_socket *s, plugin_data *p)
}
}
#ifdef SSL_OP_PRIORITIZE_CHACHA /*(openssl 1.1.1)*/
if (s->ssl_honor_cipher_order)
SSL_CTX_set_options(s->ssl_ctx, SSL_OP_PRIORITIZE_CHACHA);
#endif
#ifndef OPENSSL_NO_DH
{
DH *dh;