On Mon, Jul 17, 2023 at 08:22:58AM -0500, Mariam John wrote: > This is an implementation of feature request > [#2165](https://github.com/haproxy/haproxy/issues/2165), > to get the EC curve name used during the key agreement in OpenSSL. This patch > includes the following > changes: > - new sample fetch methods `ssl_fc_curve` and `ssl_bc_curve`, to get the > curve name > - doc changes to add description for the new sample fetch methods > - a new regression test 'ssl_curve_name` to test the new sample fetch > methods. (Tested it with the > CI against my fork using github actions and it passes with all supported > SSL libraries and OpenSSL versions) > > This uses the function `SSL_get_negotiated_group` method available from the > OpenSSLv3 release. > > Thank you. > > Mariam John (1): > MEDIUM: ssl: new sample fetch method to get curve name > > doc/configuration.txt | 10 +++++++ > reg-tests/ssl/ssl_curve_name.vtc | 51 ++++++++++++++++++++++++++++++++ > src/ssl_sample.c | 46 ++++++++++++++++++++++++++++ > 3 files changed, 107 insertions(+) > create mode 100644 reg-tests/ssl/ssl_curve_name.vtc >
Great, thank you! I just pushed your patch in the master branch. -- William Lallemand
