6 ms·
Does OpenVPN support ECDH parameters yet? openssl supports ecparam[1], and polarssl is now supporting it in their development branch[2]. [1] http://www.openssl
by hyperplane 13y ago
Does OpenVPN support ECDH parameters yet? openssl supports ecparam[1], and polarssl is now supporting it in their development branch[2].
[1] http://www.openssl.org/docs/apps/ecparam.html http://www.openssl.org/docs/apps/ecparam.html
[2] https://github.com/polarssl/polarssl/commit/577e006c2fe4a3610b2a2816a69211769b4bcf6a https://github.com/polarssl/polarssl/commit/577e006c2fe4a361...
- coderrr 13y agoWe'll use standard DHE if the user selects an RSA cert (2048, 3072, or 4096). And we'll use ECDHE if the user selects an Elliptic Curve cert. We'll also be displaying a disclaimer about the potential issues with ECC (certain experts believe TLS curves may be compromised/weakened) if the user selects that.