summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAnton <anton@picapica>2015-05-25 21:07:46 +0400
committerAnton <anton@picapica>2015-05-25 21:07:46 +0400
commitef3dd94a729da287aec1744d9135d522550d83f9 (patch)
tree239a4fdeccbab0e8d2821828b1edd5e35215de98
parent5f1eaf6ebf6ab1e12ebe27aa5432e1d305a7520e (diff)
downloadpica-pica-ef3dd94a729da287aec1744d9135d522550d83f9.tar.gz
pica-pica-ef3dd94a729da287aec1744d9135d522550d83f9.zip
generate new DH key on each handshake
-rwxr-xr-xPICA_client.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/PICA_client.c b/PICA_client.c
index 29b6955..979d274 100755
--- a/PICA_client.c
+++ b/PICA_client.c
@@ -1159,6 +1159,8 @@ if (1 != SSL_CTX_set_tmp_dh(a->ctx, dh))
DH_free(dh);
+SSL_CTX_set_options(a->ctx, SSL_OP_SINGLE_DH_USE);
+
if (!PICA_get_id_from_cert_file(cert_file, a->id))
{
ret_err = PICA_ERRINVCERT;