aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKim Alvefur <zash@zash.se>2017-11-20 00:26:41 +0100
committerKim Alvefur <zash@zash.se>2017-11-20 00:26:41 +0100
commitb9005e7b8af2f0c707d9497d334fdc5318db55cc (patch)
tree03eb1fb96258d6e89b14091510ce9d24948032d1
parent0315d775b2626b5cb62a73cf84a018f3abda0d7f (diff)
downloadprosody-b9005e7b8af2f0c707d9497d334fdc5318db55cc.tar.gz
prosody-b9005e7b8af2f0c707d9497d334fdc5318db55cc.zip
certmanager: Filter out curves not supported by LuaSec
-rw-r--r--core/certmanager.lua12
1 files changed, 12 insertions, 0 deletions
diff --git a/core/certmanager.lua b/core/certmanager.lua
index dd6cabae..e13a5d8e 100644
--- a/core/certmanager.lua
+++ b/core/certmanager.lua
@@ -27,6 +27,7 @@ local stat = require "lfs".attributes;
local tonumber, tostring = tonumber, tostring;
local pairs = pairs;
+local t_remove = table.remove;
local type = type;
local io_open = io.open;
local select = select;
@@ -131,6 +132,17 @@ local core_defaults = {
"!aNULL", -- Ciphers that does not authenticate the connection
};
}
+
+if luasec_has.curves then
+ for i = #core_defaults.curveslist, 1, -1 do
+ if not luasec_has.curves[ core_defaults.curveslist[i] ] then
+ t_remove(core_defaults.curveslist, i);
+ end
+ end
+else
+ core_defaults.curveslist = nil;
+end
+
local path_options = { -- These we pass through resolve_path()
key = true, certificate = true, cafile = true, capath = true, dhparam = true
}