upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-01-10 17:03:09 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

ITS#7595 more doc for elliptic curve

Browse source
This commit is contained in:
Howard Chu 2013-09-07 10:13:40 -07:00
parent 69f810d549
commit 9562ad00bd
1 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
doc/guide/admin/tls.sdf
View file

@ -203,6 +203,18 @@ or
This directive is ignored with Mozilla NSS.
H4: TLSECName <name>
This directive specifies the curve to use for Elliptic Curve
Diffie-Hellman ephemeral key exchange. This is required in order
to use ECDHE-based cipher suites in OpenSSL. The names of supported
curves may be shown using the following command
> openssl ecparam -list_curves
This directive is not used for GnuTLS and is ignored with Mozilla NSS.
For GnuTLS the curves may be specified in the ciphersuite.
H4: TLSVerifyClient { never | allow | try | demand }
This directive specifies what checks to perform on client certificates