Yeh I think MS just loves being crap and doing things wrong. Same from my testing and research ive seen all browsers except MS support both DHE and secp521r1. Ive heard of support for a list of curves and then the best supported is used but im not sure if browsers actually support this yet.by nginxu14 - Nginx Mailing List - English
Maxim Dounin Wrote: ------------------------------------------------------- > Hello! > > On Thu, Mar 13, 2014 at 03:04:11PM -0400, nginxu14 wrote: > > > Sorry for wasting your time you are correct secp512r1 isnt there > when I run > > the command. > > > > Im guessing that secp256r1 isnt in the list because its just the > default > > onby nginxu14 - Nginx Mailing List - English
Sorry for wasting your time you are correct secp512r1 isnt there when I run the command. Im guessing that secp256r1 isnt in the list because its just the default one. Just using the default settings and not setting a curve uses secp256r1 and secp384r1 works by setting it in ssl_ecdh_curve. I like CentOS its the only OS I use for servers but this kind of thing annoys me about CentOS because iby nginxu14 - Nginx Mailing List - English
Hi, It seems that secp521r1 has been removed from 1.4.6. Trying to use it in ssl_ecdh_curve doesnt work but worked in 1.4.5. Was this just a mistake or is there a reason why it has been removed? Thanks.by nginxu14 - Nginx Mailing List - English