Add support for Elliptical Curve Cryptography (ECC). This is disabled

by default. To enable it, pass --enable-ecc to configure.

1 files changed, 19 insertions, 0 deletions

diff --git a/nss_engine_config.c b/nss_engine_config.c
index bd067c3..1865054 100644
--- a/nss_engine_config.c
+++ b/nss_engine_config.c
@@ -80,6 +80,9 @@ static void modnss_ctx_init(modnss_ctx_t *mctx)
 
     mctx->enforce             = PR_TRUE;
     mctx->nickname            = NULL;
+#ifdef NSS_ENABLE_ECC
+    mctx->eccnickname         = NULL;
+#endif
     mctx->servercert          = NULL;
     mctx->serverkey           = NULL;
 
@@ -162,6 +165,9 @@ static void modnss_ctx_cfg_merge(modnss_ctx_t *base,
     cfgMerge(auth.verify_mode, SSL_CVERIFY_UNSET);
 
     cfgMerge(nickname, NULL);
+#ifdef NSS_ENABLE_ECC
+    cfgMerge(eccnickname, NULL);
+#endif
     cfgMerge(enforce, PR_TRUE);
 }
 
@@ -416,6 +422,19 @@ const char *nss_cmd_NSSNickname(cmd_parms *cmd,
     return NULL;
 }
 
+#ifdef NSS_ENABLE_ECC
+const char *nss_cmd_NSSECCNickname(cmd_parms *cmd,
+                                void *dcfg,
+                                const char *arg)
+{
+    SSLSrvConfigRec *sc = mySrvConfig(cmd->server);
+
+    sc->server->eccnickname = arg;
+
+    return NULL;
+}
+#endif
+
 const char *nss_cmd_NSSProxyEngine(cmd_parms *cmd, void *dcfg, int flag)
 {
     SSLSrvConfigRec *sc = mySrvConfig(cmd->server);