ssl_ecdh_curve

Syntax: ssl_ecdh_curve curve;
Default: ssl_ecdh_curve auto;
Context: mail, server

This directive appeared in versions 1.1.0 and 1.0.6.

Specifies a curve for ECDHE ciphers.

When using OpenSSL 1.0.2 or higher, it is possible to specify multiple curves (1.11.0), for example:

1
ssl_ecdh_curve prime256v1:secp384r1;

The special value auto (1.11.0) instructs nginx to use a list built into the OpenSSL library when using OpenSSL 1.0.2 or higher, or prime256v1 with older versions.

Prior to version 1.11.0, the prime256v1 curve was used by default.
doc_nginx
2025-01-10 15:47:30
Comments
Leave a Comment

Please login to continue.