From: William Lallemand <wlallemand@haproxy.com>
Date: Mon, 5 Oct 2026 16:27:55 +0000 (+0000)
Subject: DOC: ssl: clarify the NID-based curve fetch branch
X-Git-Tag: v3.5-dev9~190
X-Git-Url: https://git.kaiwu.me/?a=commitdiff_plain;h=a06fd567b3049ed2045e5c3775349b4307d9ed9d;p=haproxy.git

DOC: ssl: clarify the NID-based curve fetch branch

Document that the SSL_get_negotiated_group() path is used for OpenSSL
before 3.2 and AWS-LC API 35 or later. This only adds a comment and
does not change the fetch behavior.
---

diff --git a/src/ssl_sample.c b/src/ssl_sample.c
index ef5e6344c..67552bfe8 100644
--- a/src/ssl_sample.c
+++ b/src/ssl_sample.c
@@ -1779,6 +1779,7 @@ smp_fetch_ssl_fc_ec(const struct arg *args, struct sample *smp, const char *kw,
 	if (!curve_name)
 		return 0;
 # else
+	/* for OpenSSL < 3.2 and AWS-LC API >= 35 */
 	nid = SSL_get_negotiated_group(ssl);
 	if (!nid)
 		return 0;