You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "Wei Sun (JIRA)" <ji...@apache.org> on 2014/08/11 16:11:11 UTC
[jira] [Comment Edited] (TS-2984) Support OpenSSL's SSL_CONF API
[ https://issues.apache.org/jira/browse/TS-2984?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14092790#comment-14092790 ]
Wei Sun edited comment on TS-2984 at 8/11/14 2:09 PM:
------------------------------------------------------
Attached the patch. It also helps to simplify SSL server related configurations.
was (Author: sunwei):
Attached the patch. It also helps to simplify SSL related configurations.
> Support OpenSSL's SSL_CONF API
> ------------------------------
>
> Key: TS-2984
> URL: https://issues.apache.org/jira/browse/TS-2984
> Project: Traffic Server
> Issue Type: Improvement
> Components: SSL
> Reporter: Wei Sun
> Labels: yahoo
> Attachments: TS-2984.diff
>
>
> The use case is to add a configurable server side supported elliptic curves when serving ECDSA certificate per security's needs. To achieve this, we expect to support OpenSSL's SSL_CONF API in ATS. This also allows a flexible configuration of OpenSSL parameters without the need of implementing additional directives when new features are added to OpenSSL. Note that OpenSSL 1.0.2 or above is required to support this.
> More details of configuration file commands can be found from https://www.openssl.org/docs/ssl/SSL_CONF_cmd.html#SUPPORTED_CONFIGURATION_FILE_COM
--
This message was sent by Atlassian JIRA
(v6.2#6252)