You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@trafficserver.apache.org by "Wei Sun (JIRA)" <ji...@apache.org> on 2014/08/04 15:16:12 UTC

[jira] [Created] (TS-2984) Support OpenSSL's SSL_CONF API

Wei Sun created TS-2984:
---------------------------

             Summary: Support OpenSSL's SSL_CONF API
                 Key: TS-2984
                 URL: https://issues.apache.org/jira/browse/TS-2984
             Project: Traffic Server
          Issue Type: Improvement
          Components: SSL
            Reporter: Wei Sun


The use case is to add a configurable server side supported elliptic curves when serving ECDSA certificate per security's needs. To achieve this, we expect to support OpenSSL's SSL_CONF API in ATS. This also allows a flexible configuration of OpenSSL parameters without the need of implementing additional directives when new features are added to OpenSSL. Note that OpenSSL 1.0.2 is required to support this.

More details of configuration file commands can be found from https://www.openssl.org/docs/ssl/SSL_CONF_cmd.html#SUPPORTED_CONFIGURATION_FILE_COM



--
This message was sent by Atlassian JIRA
(v6.2#6252)