Re: Setting ssl_ecdh_curve to secp384r1 does not work

2016-07-06 Thread Florian Reinhart
ul 05, 2016 at 05:02:07PM +0200, Florian Reinhart wrote: > >> It is the same certificate on both servers and it is indeed a >> secp256r1 aka prime256v1 certificate. So does this mean, I have >> to use prime256v1 for ssl_ecdh_curve with this certificate? It’s >> sti

Re: Setting ssl_ecdh_curve to secp384r1 does not work

2016-07-05 Thread Florian Reinhart
gt; Hello! > > On Tue, Jul 05, 2016 at 04:02:21PM +0200, Florian Reinhart wrote: > >> Hi Maxim! >> >> That’s what I thought. However, all clients can access the nginx server on >> the old Ubuntu 14.04 server, which uses the same config, >> >> I teste

Re: Setting ssl_ecdh_curve to secp384r1 does not work

2016-07-05 Thread Florian Reinhart
/7.49.1 OpenSSL/1.0.2h zlib/1.2.5 nghttp2/1.12.0 Safari 9.1.1 (11601.6.17) Chrome 51.0.2704.106 Firefox 47.0.1 That’s why I don’t think it is a client issue. Best, Florian > On 05 Jul 2016, at 15:20, Maxim Dounin wrote: > > Hello! > > On Tue, Jul 05, 2016 at 02:00:04PM +0200, F

Setting ssl_ecdh_curve to secp384r1 does not work

2016-07-05 Thread Florian Reinhart
Hi all, I was running nginx 1.9.12 on Ubuntu 14.04 built from the source tarball with these options: --with-ipv6 --with-http_ssl_module --with-http_v2_module --with-openssl=/openssl-1.0.2g While switching to a new server, I also wanted to switch to the nginx Docker container using my existing