SSL_CTX_SET_TMP_ECDH(3SSL)

📦
version 4.0.3 · 14 versions
, in ubuntu stonking

💖 SSL_CTX_SET_TMP_ECDH 💖

okay so bestie, this is a page from OpenSSL (you know, the 3SSL manual section, the crypto girlies) and it's all about the ECDH key situation for ephemeral key exchange. it's giving "legacy but iconic" — because literally half of these functions are deprecated. not me showing you discontinued lore but like... we still gotta know it, fr fr. 🫶

✨ NAME ✨

SSL_CTX_set_tmp_ecdh, SSL_set_tmp_ecdh, SSL_CTX_set_ecdh_auto, SSL_set_ecdh_auto — handle ECDH keys for ephemeral key exchange 🌸

✨ SYNOPSIS ✨

#include <openssl/ssl.h>

long SSL_CTX_set_tmp_ecdh(SSL_CTX *ctx, const EC_KEY *ecdh);
long SSL_set_tmp_ecdh(SSL *ssl, const EC_KEY *ecdh);

long SSL_CTX_set_ecdh_auto(SSL_CTX *ctx, int state);
long SSL_set_ecdh_auto(SSL *ssl, int state);

✨ DESCRIPTION ✨

so SSL_CTX_set_tmp_ecdh() sets the ECDH parameters to be used to be ecdh. and the key? it gets inherited by every single ssl object that you create from ctx. cute, right? one key, whole squad. ✨

⚠️ but listen — this macro is deprecated in favor of SSL_CTX_set1_groups(3). so like, it still exists, but the glow-up already happened without it. 💅

SSL_set_tmp_ecdh() is the main-character-only version: it sets the parameters only for ssl. nobody else gets them. no sharing. 🙈

⚠️ also deprecated, this time in favor of SSL_set1_groups(3).

SSL_CTX_set_ecdh_auto() and SSL_set_ecdh_auto()? bestie... they are deprecated and have no effect. like literally nothing happens. they're just vibes sitting there in the header file. 💀

✨ RETURN VALUES ✨

  • SSL_CTX_set_tmp_ecdh() and SSL_set_tmp_ecdh() return 1 on success and 0 on failure. so it's a glow-up or a flop, no in between. ✨

(it doesn't say anything about the return values of the auto ones, because again — no effect. we don't know them. we move. 🦋)

✨ SEE ALSO ✨

iykyk, go read those too 👑✨

Copyright 2018 The OpenSSL Project Authors. All Rights Reserved. 🎀

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at https://www.openssl.org/source/license.html.

and that's the whole page, bestie — slay. 💖 this was OpenSSL 4.0.3, dated 2026-09-29, and it lives in the SSL_CTX_SET_TMP_ECDH(3SSL) manual. no cap, you ate that. 🧚✨

📦 where this page comes from