Return-Path: X-Original-To: apmail-httpd-users-archive@www.apache.org Delivered-To: apmail-httpd-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 4754610D81 for ; Wed, 2 Sep 2015 11:48:42 +0000 (UTC) Received: (qmail 1171 invoked by uid 500); 2 Sep 2015 11:48:36 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 1133 invoked by uid 500); 2 Sep 2015 11:48:36 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 1123 invoked by uid 99); 2 Sep 2015 11:48:35 -0000 Received: from Unknown (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Sep 2015 11:48:35 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 95B5918233E for ; Wed, 2 Sep 2015 11:48:35 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 2.979 X-Spam-Level: ** X-Spam-Status: No, score=2.979 tagged_above=-999 required=6.31 tests=[HTML_MESSAGE=3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=disabled Received: from mx1-us-west.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id nsUjHM8KRkzO for ; Wed, 2 Sep 2015 11:48:34 +0000 (UTC) Received: from BAY004-OMC2S9.hotmail.com (bay004-omc2s9.hotmail.com [65.54.190.84]) by mx1-us-west.apache.org (ASF Mail Server at mx1-us-west.apache.org) with ESMTPS id 9A2D321568 for ; Wed, 2 Sep 2015 11:48:34 +0000 (UTC) Received: from BAY180-W38 ([65.54.190.123]) by BAY004-OMC2S9.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Wed, 2 Sep 2015 04:48:28 -0700 X-TMN: [EwXIk24gPe/WecYl8vEKJPbXbwczJ9Od] X-Originating-Email: [winpackjason@outlook.com] Message-ID: Content-Type: multipart/alternative; boundary="_8204285b-ee3d-4193-8c46-46b16a27afdb_" From: Jason - To: "users@httpd.apache.org" Date: Wed, 2 Sep 2015 14:48:27 +0300 Importance: High MIME-Version: 1.0 X-OriginalArrivalTime: 02 Sep 2015 11:48:28.0537 (UTC) FILETIME=[48947E90:01D0E575] Subject: [users@httpd] ECC Curve Order Preference --_8204285b-ee3d-4193-8c46-46b16a27afdb_ Content-Type: text/plain; charset="iso-8859-7" Content-Transfer-Encoding: quoted-printable I have Ubuntu 15.04 with Apache 2.4.10 (OpenSSL 1.0.1f) and I would like to= configure Apache ssl.conf specifically for "ECC Curve Order"=2C as on Wind= ows 10=2C where I select the preferred order of Elliptic Curves. I have two= questions related to this: 1) On OpenSSL=2C how do I view the supported ECC Curves (eg. NISTp521=2C br= ainpool=2C etc.) of my system? 2) On Apache=2C how do I configure (inside ssl.conf) the curve order? Can I= also set it to follow a specific preference order? (I would prefer 1st P-5= 21=2C 2st P-384=2C 3rd P-256=2C and not P-256 by default as my Apache does.= ..) = --_8204285b-ee3d-4193-8c46-46b16a27afdb_ Content-Type: text/html; charset="iso-8859-7" Content-Transfer-Encoding: quoted-printable

I have Ubuntu 15.04 with Ap= ache 2.4.10 (OpenSSL 1.0.1f) and I would like to configure Apache ssl.conf = specifically for "ECC Curve Order"=2C as on Windows 10=2C where I select th= e preferred order of Elliptic Curves. I have two questions related to this:=

1) On OpenSSL=2C how do I view the supported ECC = Curves (eg. NISTp521=2C brainpool=2C etc.) of my system?

2) On Apache=2C how do I configure (inside ssl.conf) the curve order= ? Can I also set it to follow a specific preference order? (I would prefer = 1st P-521=2C 2st P-384=2C 3rd P-256=2C and not P-256 by default as my Apach= e does...)

= --_8204285b-ee3d-4193-8c46-46b16a27afdb_--