From 9562ad00bd7f965df721bc22ac905bc759298a27 Mon Sep 17 00:00:00 2001 From: Howard Chu Date: Sat, 7 Sep 2013 10:13:40 -0700 Subject: [PATCH] ITS#7595 more doc for elliptic curve --- doc/guide/admin/tls.sdf | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/doc/guide/admin/tls.sdf b/doc/guide/admin/tls.sdf index cd8343da97..358c24398e 100644 --- a/doc/guide/admin/tls.sdf +++ b/doc/guide/admin/tls.sdf @@ -203,6 +203,18 @@ or This directive is ignored with Mozilla NSS. +H4: TLSECName + +This directive specifies the curve to use for Elliptic Curve +Diffie-Hellman ephemeral key exchange. This is required in order +to use ECDHE-based cipher suites in OpenSSL. The names of supported +curves may be shown using the following command + +> openssl ecparam -list_curves + +This directive is not used for GnuTLS and is ignored with Mozilla NSS. +For GnuTLS the curves may be specified in the ciphersuite. + H4: TLSVerifyClient { never | allow | try | demand } This directive specifies what checks to perform on client certificates -- 2.39.5