Need Replacement for Deprecated function.

Viktor Dukhovni openssl-users at dukhovni.org
Wed Dec 1 16:35:02 UTC 2021


On Wed, Dec 01, 2021 at 03:54:15PM +0000, Jeremy Harris wrote:

> On 29/11/2021 15:10, Matt Caswell wrote:
> > SSL_CTX_set0_tmp_dh_pkey() 
> 
> "Deprecated since OpenSSL 3.0"
> 
> Is there a non-deprecated interface?

I've reworked the DH support in Postfix for OpenSSL 3.x compatibility,
without use of any deprecated interfaces.  I now prefer/recommend the
use "auto" DH parameter selection:

    https://github.com/vdukhovni/postfix/blob/master/postfix/src/tls/tls_dh.c#L140-L230

-- 
    Viktor.


More information about the openssl-users mailing list