[mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
set SSL_OP_PRIORITIZE_CHACHA, if available, when ssl.honor-cipher-order = "enable"
This commit is contained in:
parent
7d9052c059
commit
3fbedbced2
|
@ -1741,6 +1741,11 @@ network_init_ssl (server *srv, plugin_config_socket *s, plugin_data *p)
|
|||
}
|
||||
}
|
||||
|
||||
#ifdef SSL_OP_PRIORITIZE_CHACHA /*(openssl 1.1.1)*/
|
||||
if (s->ssl_honor_cipher_order)
|
||||
SSL_CTX_set_options(s->ssl_ctx, SSL_OP_PRIORITIZE_CHACHA);
|
||||
#endif
|
||||
|
||||
#ifndef OPENSSL_NO_DH
|
||||
{
|
||||
DH *dh;
|
||||
|
|
Loading…
Reference in New Issue