Repository navigation
TLS module: Support multiple ecdhCurve's #15054
Description
The tls module respectively tls.createSecureContext should support multiple echdCurve's like nginx does.
Example:
const options = {
ecdhCurves: 'x25519:secp521r1:secp384r1',
};
The order should be honored (perhaps configurable like honorChiperOrder).
Activity
bnoordhuis commentedon Aug 28, 2017
Pull requests welcome. The way to do it is to call
SSL_CTX_set_ecdh_auto()+SSL_CTX_set1_curves()orSSL_CTX_set1_curves_list(). We currently callSSL_CTX_set_tmp_ecdh(), that may have to change.An array of strings is arguably a little more idiomatic in node.js but it's probably not a deal breaker.
honorChiperOrdershould already affect who gets to select the curve, client or server.crypto: support multiple ECDH curves and auto
crypto: support multiple ECDH curves and auto
bnoordhuis commentedon Sep 21, 2017
Closing, #15206 was merged and is scheduled to be released in v8.6.0.
crypto: support multiple ECDH curves and auto
crypto: support multiple ECDH curves and auto