Choose a safer value for SSL_OP_ALLOW_NO_DHE_KEX
authorMatt Caswell <matt@openssl.org>
Fri, 7 Jul 2017 09:56:48 +0000 (10:56 +0100)
committerMatt Caswell <matt@openssl.org>
Fri, 7 Jul 2017 15:08:05 +0000 (16:08 +0100)
commit4f11c7476b14225d5919924e433dbac0b4806081
treeeb9e9ede868e339c6f1c7aebc019c15e974ae888
parent4e2bd9cb0f1a602a5c02906eb9d5bd1a592b684b
Choose a safer value for SSL_OP_ALLOW_NO_DHE_KEX

1.1.0 included the previous value for SSL_OP_ALLOW_NO_DHE_KEX in
SSL_OP_ALL. This might cause binary compatibility issues. We should choose
a value that is not in SSL_OP_ALL.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3833)
include/openssl/ssl.h