On Wed, Dec 01, 2021 at 03:54:15PM +0000, Jeremy Harris wrote:
> On 29/11/2021 15:10, Matt Caswell wrote:
> > SSL_CTX_set0_tmp_dh_pkey()
>
> "Deprecated since OpenSSL 3.0"
>
> Is there a non-deprecated interface?
I've reworked the DH support in Postfix for OpenSSL 3.x compatibility,
without use of any deprecated interfaces. I now prefer/recommend the
use "auto" DH parameter selection:
https://github.com/vdukhovni/postfix/blob/master/postfix/src/tls/tls_dh.c#L140-L230
--
Viktor.
