[
https://issues.apache.org/jira/browse/TS-2984?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14251883#comment-14251883
]
James Peach commented on TS-2984:
---------------------------------
I don't think we need both {{proxy.config.ssl.server.openssl_conf_cmd}} and
{{proxy.config.ssl.server.openssl_conf_cmd.path}}. I think we should just use
{{proxy.config.ssl.server.openssl_conf}} and make it relative to
{{$SYSCONFDIR}}.
> Support OpenSSL's SSL_CONF API
> ------------------------------
>
> Key: TS-2984
> URL: https://issues.apache.org/jira/browse/TS-2984
> Project: Traffic Server
> Issue Type: Improvement
> Components: SSL
> Reporter: Wei Sun
> Assignee: Alan M. Carroll
> Labels: yahoo
> Fix For: 6.0.0
>
> Attachments: TS-2984.diff
>
>
> The use case is to add a configurable server side supported elliptic curves
> when serving ECDSA certificate per security's needs. To achieve this, we
> expect to support OpenSSL's SSL_CONF API in ATS. This also allows a flexible
> configuration of OpenSSL parameters without the need of implementing
> additional directives when new features are added to OpenSSL. Note that
> OpenSSL 1.0.2 or above is required to support this.
> More details of configuration file commands can be found from
> https://www.openssl.org/docs/ssl/SSL_CONF_cmd.html#SUPPORTED_CONFIGURATION_FILE_COM
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
