70b5adb396
make it possible to use regular (non EC) EDH ciphers. To make this possible a Diffie-Hellman parameter must be passed to the openssl library. There are a few options possible as described in the manuals at [1] and [2]. Simplest approach is to generate a DH parameter using openssl dhparam -C <lenght> and include the code into the application. The lenght used for this commit is 2236 bits long, which is the longest possible without risking backward incompatibilities with old systems as stated in [1]. Newer systems should use ECDH anyway, so it makes sense to keep this method as compatible with older system as possible. Paramters longer than 2048 should still be secure enough at the time of writing. [1] https://wiki.openssl.org/index.php/Diffie-Hellman_parameters [2] https://wiki.openssl.org/index.php/Manual:SSL_CTX_set_tmp_dh_callback(3) |
||
---|---|---|
.. | ||
arch.h | ||
base64.c | ||
base64.h | ||
defines.h | ||
fifo.c | ||
fifo.h | ||
file.c | ||
file.h | ||
list16.c | ||
list16.h | ||
list.c | ||
list.h | ||
log.c | ||
log.h | ||
Makefile.am | ||
os_calls.c | ||
os_calls.h | ||
parse.h | ||
pixman-region16.c | ||
pixman-region.c | ||
pixman-region.h | ||
rail.h | ||
ssl_calls.c | ||
ssl_calls.h | ||
thread_calls.c | ||
thread_calls.h | ||
trans.c | ||
trans.h | ||
xrdp_client_info.h | ||
xrdp_constants.h | ||
xrdp_rail.h | ||
xrdp_sockets.h |