From a7717ae75398e8cf8312aa0c89f0002c6f10c588 Mon Sep 17 00:00:00 2001 From: Howard Chu Date: Tue, 14 Sep 2021 17:56:03 +0100 Subject: [PATCH] ITS#9687 TLSECName is no longer required with OpenSSL 1.1+ --- doc/guide/admin/tls.sdf | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/doc/guide/admin/tls.sdf b/doc/guide/admin/tls.sdf index 1e2a8bfce8..08c653460c 100644 --- a/doc/guide/admin/tls.sdf +++ b/doc/guide/admin/tls.sdf @@ -160,12 +160,13 @@ or H4: TLSECName This directive specifies the curve to use for Elliptic Curve -Diffie-Hellman ephemeral key exchange. This is required in order +Diffie-Hellman ephemeral key exchange. This option is only needed to use ECDHE-based cipher suites in OpenSSL. The names of supported curves may be shown using the following command > openssl ecparam -list_curves +If it is omitted, OpenSSL will auto-negotiate the curve choice. This directive is not used for GnuTLS. For GnuTLS the curves may be specified in the ciphersuite. -- 2.47.3