Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Commit0a9c417

Browse files
committed
gh-109945 update docs to clarify change is OpenSSL 3 and above
Signed-off-by: Nigel Jones <jonesn@uk.ibm.com>
1 parentcda6336 commit0a9c417

File tree

2 files changed

+8
-5
lines changed

2 files changed

+8
-5
lines changed

‎Doc/library/ssl.rst‎

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1750,11 +1750,14 @@ to speed up repeated connections from the same clients.
17501750

17511751
..method::SSLContext.set_ecdh_curve(curve_name)
17521752

1753-
Set the curvenames for Elliptic Curve-based Diffie-Hellman (ECDH) key
1753+
Set the curvename for Elliptic Curve-based Diffie-Hellman (ECDH) key
17541754
exchange. ECDH is significantly faster than regular DH while arguably
1755-
as secure. The *curve_name* parameter should be a colon separated string describing
1756-
one or more well-known elliptic curves, for example ``prime256v1`` for a widely
1757-
supported curve, or ``prime256v1:brainpoolP384r1`` to specify two curves that will be
1755+
as secure. The *curve_name* parameter should be a string describing
1756+
a well-known elliptic curve, for example ``prime256v1`` for a widely
1757+
supported curve.
1758+
1759+
For OpenSSL 3.0 and above *curve_name* parameter can be a colon separated
1760+
list of curves, for example ``prime256v1:brainpoolP384r1`` specifies two curves that will be
17581761
used on a client hello.
17591762

17601763
This setting doesn't apply to client sockets. You can also use the
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
Adds support for multiple curves to be specified in SSLContext.set_ecdh_curve(curve_name) by setting curve_name to a colon separated list of curves. This allows multiple curves to be passed on a client hello.
1+
Adds support for multiple curves to be specified in SSLContext.set_ecdh_curve(curve_name)for OpenSSL 3.0 and aboveby setting curve_name to a colon separated list of curves. This allows multiple curves to be passed on a client hello.

0 commit comments

Comments
 (0)

[8]ページ先頭

©2009-2025 Movatter.jp