diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml index 6bc2690ce07..faf0bdb62aa 100644 --- a/doc/src/sgml/config.sgml +++ b/doc/src/sgml/config.sgml @@ -1563,6 +1563,15 @@ include_dir 'conf.d' The default is X25519:prime256v1. + + + X25519 is not allowed when + OpenSSL is configured for FIPS mode and + must be removed from the server configuration when FIPS mode is + enabled. + + + OpenSSL names for the most common curves are: