Hi Rémi,

On Fri, Oct 10, 2014 at 06:57:33PM +0200, Remi Gacogne wrote:
> I finally found the time to test with a proper boringssl build. This
> minor patch cleans the way haproxy checks for enabled DHE ciphers at
> configuration time, replacing a direct access to the cipher_list member
> by a call to SSL_get_ciphers(), as suggested by Lukas Tribus.
> 
> It enables the check for enabled DHE ciphers when compiled against
> boringssl, and may prevent issues later should the SSL_CTX struct be
> modified in OpenSSL.

Patch applied with Emeric's approval :-)

Thanks,
Willy


Reply via email to