diff --git a/doc/guide/admin/tls.sdf b/doc/guide/admin/tls.sdf index cd8343da97..358c24398e 100644 --- a/doc/guide/admin/tls.sdf +++ b/doc/guide/admin/tls.sdf @@ -203,6 +203,18 @@ or This directive is ignored with Mozilla NSS. +H4: TLSECName + +This directive specifies the curve to use for Elliptic Curve +Diffie-Hellman ephemeral key exchange. This is required in order +to use ECDHE-based cipher suites in OpenSSL. The names of supported +curves may be shown using the following command + +> openssl ecparam -list_curves + +This directive is not used for GnuTLS and is ignored with Mozilla NSS. +For GnuTLS the curves may be specified in the ciphersuite. + H4: TLSVerifyClient { never | allow | try | demand } This directive specifies what checks to perform on client certificates