Commit 0dfa0eef authored by Oleksandr Byelkin's avatar Oleksandr Byelkin

MDEV-8957 [PATCH] Useless ssl_ctx_set_tmp_dh call in libmysql

Accepted patch of Georg: do not setup Differ-Hellman parameters on client.
parent d85490af
......@@ -259,14 +259,17 @@ new_VioSSLFd(const char *key_file, const char *cert_file,
}
/* DH stuff */
dh=get_dh2048();
if (!SSL_CTX_set_tmp_dh(ssl_fd->ssl_context, dh))
if (!is_client_method)
{
*error= SSL_INITERR_DH;
goto err3;
}
dh=get_dh2048();
if (!SSL_CTX_set_tmp_dh(ssl_fd->ssl_context, dh))
{
*error= SSL_INITERR_DH;
goto err3;
}
DH_free(dh);
DH_free(dh);
}
DBUG_PRINT("exit", ("OK 1"));
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment