Skip to content

GitLab

  • Menu
Projects Groups Snippets
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • Trac Trac
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Issues 246
    • Issues 246
    • List
    • Boards
    • Service Desk
    • Milestones
  • Monitor
    • Monitor
    • Metrics
    • Incidents
  • Analytics
    • Analytics
    • Value stream
  • Wiki
    • Wiki
  • Activity
  • Create a new issue
  • Issue Boards
Collapse sidebar
  • Legacy
  • TracTrac
  • Issues
  • #16140

Closed (moved)
(moved)
Open
Created May 20, 2015 by Yawning Angel@yawning

Drop support for OpenSSL without ECC.

Offshoot of #16034 (moved).

tor should error out at build time (and possibly runtime if we can easily detect it) if elliptic curve cryptography is not available (or the ECDHE suites we want to use are not available).

OPENSSL_NO_EC is the define for the former, and ECC support is available in any version of OpenSSL that we want to support (>= 1.0.0). I think the only people that ship OpenSSL without all the curves available are RedHat (but at least they have some curves now, as opposed to none). I'm personally ok with breaking builds on such systems if they don't give us all the curves we want.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking