| commit | 9f226a5f5183e8814ff30e7436a128a823315532 | [log] [tgz] |
|---|---|---|
| author | David Benjamin <davidben@chromium.org> | Sun Apr 26 22:12:32 2015 -0400 |
| committer | Adam Langley <agl@google.com> | Wed May 06 22:24:53 2015 +0000 |
| tree | f2a12438a2f3a4e5ad7e46e1d5cc27f23c229220 | |
| parent | 7cde0dee7cfc508835bf47200004960a58353631 [diff] |
Always set SSL_OP_SINGLE_DH_USE. This is an API wart that makes it easy to accidentally reuse the server DHE half for every handshake. It's much simpler to have only one mode. This mirrors the change made to the ECDHE code; align with that logic. Change-Id: I47cccbb354d70127ab458f99a6d390b213e4e515 Reviewed-on: https://boringssl-review.googlesource.com/4565 Reviewed-by: Adam Langley <agl@google.com>