Skip to content

Commit

Permalink
Clarify in the s_client/s_server documentation that supported curves …
Browse files Browse the repository at this point in the history
…(aka groups) include named EC parameters as well as X25519 and X448 or FFDHE groups
  • Loading branch information
olszomal committed Jul 3, 2024
1 parent f965632 commit 0bfb345
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 2 deletions.
5 changes: 4 additions & 1 deletion doc/man1/openssl-s_client.pod.in
Original file line number Diff line number Diff line change
Expand Up @@ -656,7 +656,10 @@ For example strings, see L<SSL_CTX_set1_sigalgs(3)>
=item B<-curves> I<curvelist>

Specifies the list of supported curves to be sent by the client. The curve is
ultimately selected by the server. For a list of all curves, use:
ultimately selected by the server.

The list of all supported curves includes named EC parameters as well as X25519
and X448 or FFDHE groups. For a list of named EC parameters, use:

$ openssl ecparam -list_curves

Expand Down
4 changes: 3 additions & 1 deletion doc/man1/openssl-s_server.pod.in
Original file line number Diff line number Diff line change
Expand Up @@ -671,7 +671,9 @@ Signature algorithms to support for client certificate authentication
=item B<-named_curve> I<val>

Specifies the elliptic curve to use. NOTE: this is single curve, not a list.
For a list of all possible curves, use:

The list of all supported curves includes named EC parameters as well as X25519
and X448 or FFDHE groups. For a list of named EC parameters, use:

$ openssl ecparam -list_curves

Expand Down

0 comments on commit 0bfb345

Please sign in to comment.