# HG changeset patch
# User Paul Aurich <paul@darkrain42.org>
# Date 1309724016 25200
# Node ID b6271d3bae0b40f28ff228846d69c87baf56170a
# Parent  e26f1f91118ae17420e1db82e9b577e745f6ec18
context: Support ECDH cipher suites, where applicable

diff -r e26f1f91118a -r b6271d3bae0b src/context.c
--- a/src/context.c	Sun Jul 03 13:13:36 2011 -0700
+++ b/src/context.c	Sun Jul 03 13:13:36 2011 -0700
@@ -269,6 +269,14 @@
    * for server mode, but clearer to put it here rather than set_mode.
    */
   SSL_CTX_set_tmp_dh_callback(ctx->context, dh_param_cb);
+#if defined(SSL_CTX_set_tmp_ecdh)
+  /*
+   * Support ECDH parameters.  This uses the 384 bit prime field from
+   * NIST.
+   */
+  SSL_CTX_set_tmp_ecdh(ctx->context, EC_KEY_new_by_curve_name(NID_secp384r1));
+#endif
+
   SSL_CTX_set_ex_data(ctx->context, luasec_sslctx_idx, ctx);
 
   luaL_getmetatable(L, "SSL:Context");