]> git.kaiwu.me - haproxy.git/commit
MINOR: ssl: support curve fetches with AWS-LC API 30
authorWilliam Lallemand <wlallemand@haproxy.com>
Mon, 5 Oct 2026 12:45:35 +0000 (14:45 +0200)
committerWilliam Lallemand <wlallemand@haproxy.com>
Mon, 5 Oct 2026 12:56:27 +0000 (14:56 +0200)
commite671cb696dc569892d5ea2de38cab479d4935543
treebc097c04c03e83e152569ed4001a8882bd96132e
parentf2ff92910051cb1d41cda59ee469e2c1ea0c6475
MINOR: ssl: support curve fetches with AWS-LC API 30

Enable ssl_fc_curve and ssl_bc_curve with AWS-LC API 30-34, including
AWS-LC 3.0.0, using SSL_get_group_id() and SSL_get_group_name() instead
of SSL_get_negotiated_group(), which requires API 35.

Map NIST curve group IDs to OpenSSL short names to keep the output
consistent with newer AWS-LC versions. Preserve native names for other
groups, including post-quantum and hybrid groups.

Update the compatibility documentation and enable the curve regression
tests for AWS-LC API 30.
doc/configuration.txt
reg-tests/quic/ssl_curve_name.vtc
reg-tests/quic/ssl_curves_selection.vtc
reg-tests/ssl/ssl_curve_name.vtc
reg-tests/ssl/ssl_curves_selection.vtc
src/ssl_sample.c