Add option to disable DH init check for faster init

The check is not necessary and on Android it takes around 1 minute to
  complete.
This commit is contained in:
Gioacchino Mazzurco 2020-03-01 01:38:26 +01:00
parent 6bb0950dd6
commit 15c3e87bc5
No known key found for this signature in database
GPG key ID: A1FBCA3872E87051
2 changed files with 19 additions and 2 deletions

View file

@ -404,10 +404,16 @@ int AuthSSLimpl::InitAuth(
std::cout.flush() ;
#ifndef RS_DISABLE_DIFFIE_HELLMAN_INIT_CHECK
if(DH_check(dh, &codes) && codes == 0)
SSL_CTX_set_tmp_dh(sslctx, dh);
SSL_CTX_set_tmp_dh(sslctx, dh);
else
pfs_enabled = false ;
pfs_enabled = false;
#else // ndef RS_DISABLE_DIFFIE_HELLMAN_INIT_CHECK
/* DH_check(...) is not strictly necessary and on Android devices it
* takes at least one minute which is untolerable there */
SSL_CTX_set_tmp_dh(sslctx, dh);
#endif // ndef RS_DISABLE_DIFFIE_HELLMAN_INIT_CHECK
}
else
pfs_enabled = false ;