Skip to content

chg: usr: use deterministic ecdsa for openssl >= 3.2

OpenSSL has added support for deterministic ECDSA (RFC 6979) with version 3.2.

Use it by default as it removes arguably its most fragile side of ECDSA. The derandomization doesn't pose a risk for DNS usecases and is allowed by FIPS 186-5.

Closes #299 (closed)

Edited by Aydın Mercan

Merge request reports