Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ssl: fix elliptic curve selection in server mode #183

Closed
wants to merge 1 commit into from

Commits on Jan 10, 2014

  1. ssl: fix elliptic curve selection in server mode

    The server code erroneously took the list of curves supported by the
    client from it's own hello extension, effectively breaking curve
    selection all together.
    
    Also the default fallback secp256k1 curve is not supported by
    all clients. secp256r1 is recommended as part of the NIST Suite B
    cryptographic suites. The chances are much better that all clients
    support it, so use that as fallback.
    Andreas Schultz committed Jan 10, 2014
    Configuration menu
    Copy the full SHA
    6f4f02e View commit details
    Browse the repository at this point in the history