This is an implementation of feature request 
[#2165](https://github.com/haproxy/haproxy/issues/2165),
to get the EC curve name used during the key agreement in OpenSSL. This patch 
includes the following
changes:
- new sample fetch methods `ssl_fc_curve` and `ssl_bc_curve`, to get the curve 
name
- doc changes to add description for the new sample fetch methods
- a new regression test 'ssl_curve_name` to test the new sample fetch methods. 
(Tested it with the 
  CI against my fork using github actions and it passes with all supported SSL 
libraries and OpenSSL versions)

This uses the function `SSL_get_negotiated_group` method available from the 
OpenSSLv3 release.

Thank you.

Mariam John (1):
  MEDIUM: ssl: new sample fetch method to get curve name

 doc/configuration.txt            | 10 +++++++
 reg-tests/ssl/ssl_curve_name.vtc | 51 ++++++++++++++++++++++++++++++++
 src/ssl_sample.c                 | 46 ++++++++++++++++++++++++++++
 3 files changed, 107 insertions(+)
 create mode 100644 reg-tests/ssl/ssl_curve_name.vtc

-- 
2.39.2 (Apple Git-143)


Reply via email to