nghttpx: Add P-384 and P-521 to the default of --ecdh-curves option

cdb1d6b4 · Tatsuhiro Tsujikawa · 1b4ccd0d · cdb1d6b4
Commit cdb1d6b4 authored Oct 08, 2016 by Tatsuhiro Tsujikawa
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 2 deletions

src/shrpx.cc src/shrpx.cc +2 -2

No files found.
--- a/src/shrpx.cc
+++ b/src/shrpx.cc
@@ -1323,9 +1323,9 @@ void fill_default_config(Config *config) {

  tlsconf.session_timeout = std::chrono::hours(12);
 #if OPENSSL_1_1_API
-  tlsconf.ecdh_curves = StringRef::from_lit("X25519:P-256");
+  tlsconf.ecdh_curves = StringRef::from_lit("X25519:P-256:P-384:P-521");
 #else  // !OPENSSL_1_1_API
-  tlsconf.ecdh_curves = StringRef::from_lit("P-256");
+  tlsconf.ecdh_curves = StringRef::from_lit("P-256:P-384:P-521");
 #endif // !OPENSSL_1_1_API

  auto &httpconf = config->http;