             [ load-verify-locations ]
             [ set-verify-depth ]
             [ load-dh-params ]
+            [ set-ecdh-params ]
             [ ]
         } cleave
     ] with-destructors ;

        SSL_CTX_set_tmp_dh ssl-error
    ] [ drop ] if ;

: <openssl-context> ( config ctx -- context )
    openssl-context new-disposable
        swap >>handle


: set-secure-cipher-list-only ( ssl -- ssl )
    dup handle>>
    "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA:DES-CBC3-SHA:IDEA-CBC-SHA:AES128-SHA256:AES128-SHA:CAMELLIA128-SHA:AES256-SHA:CAMELLIA256-SHA"
    SSL_set_cipher_list ssl-error ;

: <ssl-handle> ( fd -- ssl )
