From 62f31efe1528f247f98f2b232bbb792155d71fe8 Mon Sep 17 00:00:00 2001 From: Howard Chu Date: Sat, 7 Sep 2013 10:13:40 -0700 Subject: [PATCH] ITS#7595 more doc for elliptic curve --- doc/guide/admin/tls.sdf | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/doc/guide/admin/tls.sdf b/doc/guide/admin/tls.sdf index e2bc2f8712..7aca8b798d 100644 --- a/doc/guide/admin/tls.sdf +++ b/doc/guide/admin/tls.sdf @@ -203,6 +203,18 @@ or This directive is ignored with Mozilla NSS. +H4: TLSECName + +This directive specifies the curve to use for Elliptic Curve +Diffie-Hellman ephemeral key exchange. This is required in order +to use ECDHE-based cipher suites in OpenSSL. The names of supported +curves may be shown using the following command + +> openssl ecparam -list_curves + +This directive is not used for GnuTLS and is ignored with Mozilla NSS. +For GnuTLS the curves may be specified in the ciphersuite. + H4: TLSVerifyClient { never | allow | try | demand } This directive specifies what checks to perform on client certificates -- 2.47.2