From 0575755eaf9e35406e4e27a00a7505b72465c08d Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Wed, 12 Feb 2025 16:51:13 +0100 Subject: [PATCH] ssl_test.c: Allow using DHE with TLS-1.2 and older versions Reviewed-by: Tim Hudson Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/26715) --- test/ssl_test.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/test/ssl_test.c b/test/ssl_test.c index ea608518f92ed..2e2b1b2a36c31 100644 --- a/test/ssl_test.c +++ b/test/ssl_test.c @@ -509,14 +509,18 @@ static int test_handshake(int idx) goto err; if (!SSL_CTX_config(server_ctx, "server") + || !SSL_CTX_set_dh_auto(server_ctx, 1) || !SSL_CTX_config(client_ctx, "client")) { goto err; } - if (server2_ctx != NULL && !SSL_CTX_config(server2_ctx, "server2")) + if (server2_ctx != NULL + && (!SSL_CTX_config(server2_ctx, "server2") + || !SSL_CTX_set_dh_auto(server2_ctx, 1))) goto err; if (resume_server_ctx != NULL - && !SSL_CTX_config(resume_server_ctx, "resume-server")) + && (!SSL_CTX_config(resume_server_ctx, "resume-server") + || !SSL_CTX_set_dh_auto(resume_server_ctx, 1))) goto err; if (resume_client_ctx != NULL && !SSL_CTX_config(resume_client_ctx, "resume-client"))