upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-12-24 00:29:35 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

ITS#9687 TLSECName is no longer required with OpenSSL 1.1+

Browse source
This commit is contained in:
Howard Chu 2021-09-14 17:56:03 +01:00
parent f38b7b9f49
commit a7717ae753
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
doc/guide/admin/tls.sdf
View file

@ -160,12 +160,13 @@ or
H4: TLSECName <name>
This directive specifies the curve to use for Elliptic Curve
Diffie-Hellman ephemeral key exchange. This is required in order
Diffie-Hellman ephemeral key exchange. This option is only needed
to use ECDHE-based cipher suites in OpenSSL. The names of supported
curves may be shown using the following command
> openssl ecparam -list_curves
If it is omitted, OpenSSL will auto-negotiate the curve choice.
This directive is not used for GnuTLS.
For GnuTLS the curves may be specified in the ciphersuite.