WolfSSL
/
wolfssl
mirror of https://github.com/wolfSSL/wolfssl.git
1
0
Fork 0
Code Issues Releases Wiki Activity

strengthen wording of 'test only' comment and cite relvent RFC along with correcting 'Currently allows comment to represent current behavior'

pull/11234/head
Aidan Keefe 2026-08-21 09:43:42 -06:00
parent 9ab8a4b19d
commit 550597a43a
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
wolfssl/ssl.h
View File

@ -6319,8 +6319,11 @@ WOLFSSL_API int wolfSSL_CTX_AllowEncryptThenMac(WOLFSSL_CTX* ctx, int set);
WOLFSSL_API int wolfSSL_AllowEncryptThenMac(WOLFSSL *s, int set);
#endif
/* This feature is used to set a fixed ephemeral key and is for testing only */
/* Currently allows ECDHE and DHE only */
/* This feature is used to set a fixed ephemeral key and is for testing only.
* Reusing a key share across connections is incorrect behavior
* and is forbidden by RFC 9846 Section 1.2 so do not enable this in
* production. */
/* Currently allows DHE, ECDHE, X25519 and X448 only */
#ifdef WOLFSSL_STATIC_EPHEMERAL
WOLFSSL_API int wolfSSL_CTX_set_ephemeral_key(WOLFSSL_CTX* ctx, int keyAlgo,
const char* key, unsigned int keySz, int format);