mirror of
https://github.com/cesanta/mongoose.git
synced 2026-10-11 17:04:33 +07:00
SSL_CTX_new can fail
SSLv23_ methods deprecated
This commit is contained in:
+6
-2
@@ -12567,8 +12567,12 @@ void mg_tls_init(struct mg_connection *c, const struct mg_tls_opts *opts) {
|
||||
s_initialised++;
|
||||
}
|
||||
MG_DEBUG(("%lu Setting TLS", c->id));
|
||||
tls->ctx = c->is_client ? SSL_CTX_new(SSLv23_client_method())
|
||||
: SSL_CTX_new(SSLv23_server_method());
|
||||
tls->ctx = c->is_client ? SSL_CTX_new(TLS_client_method())
|
||||
: SSL_CTX_new(TLS_server_method());
|
||||
if (tls->ctx == NULL) {
|
||||
mg_error(c, "SSL_CTX_new");
|
||||
goto fail;
|
||||
}
|
||||
#ifdef MG_TLS_SSLKEYLOGFILE
|
||||
SSL_CTX_set_keylog_callback(tls->ctx, ssl_keylog_cb);
|
||||
#endif
|
||||
|
||||
+6
-2
@@ -134,8 +134,12 @@ void mg_tls_init(struct mg_connection *c, const struct mg_tls_opts *opts) {
|
||||
s_initialised++;
|
||||
}
|
||||
MG_DEBUG(("%lu Setting TLS", c->id));
|
||||
tls->ctx = c->is_client ? SSL_CTX_new(SSLv23_client_method())
|
||||
: SSL_CTX_new(SSLv23_server_method());
|
||||
tls->ctx = c->is_client ? SSL_CTX_new(TLS_client_method())
|
||||
: SSL_CTX_new(TLS_server_method());
|
||||
if (tls->ctx == NULL) {
|
||||
mg_error(c, "SSL_CTX_new");
|
||||
goto fail;
|
||||
}
|
||||
#ifdef MG_TLS_SSLKEYLOGFILE
|
||||
SSL_CTX_set_keylog_callback(tls->ctx, ssl_keylog_cb);
|
||||
#endif
|
||||
|
||||
Reference in New Issue
Block a user