Hello!
On Wed, Oct 26, 2022 at 06:22:54AM +0300, Sergey A. Osokin wrote:
[...]
> It's also possible to see the list of the elliptic curve parameters with
> the following command:
>
> % openssl ecparam -list_curves
Fun fact: this list only includes standard curves, but not custom
curves such a
Hello!
On Tue, Oct 25, 2022 at 11:25:39AM -0400, wordlesswind wrote:
> I deployed ECDSA P-256 certificate issued by Let's Encrypt E1 on nginx, and
> I noticed something about "ssl_ecdh_curve auto;".
>
> When I set ssl_protocols to "TLSv1.2 TLSv1.3", ssl_e
Hi,
hope you're doing well.
On Tue, Oct 25, 2022 at 11:25:39AM -0400, wordlesswind wrote:
>
> I deployed ECDSA P-256 certificate issued by Let's Encrypt E1 on nginx, and
> I noticed something about "ssl_ecdh_curve auto;".
Well, the `auto' is the default val
Hello guys,
I deployed ECDSA P-256 certificate issued by Let's Encrypt E1 on nginx, and
I noticed something about "ssl_ecdh_curve auto;".
When I set ssl_protocols to "TLSv1.2 TLSv1.3", ssl_ecdh_curve has only
prime256v1. When set to TLSv1.3, x448 is missing and is th