![]() This configuration setting permits nginx to auto discover supported curves based on what openssl was compiled with. With the old default of secp384r1 if you attempted to use a key from a different curve, for example prime256v1, the SSL handshake would fail in an awful way without any helpful errors logged anywhere. The default setting in nginx has been "auto" since 1.11.0 |
||
---|---|---|
.. | ||
config.go | ||
config_test.go |