Changes nginx ECC curve selection example to the least-bad but actually widely suppor...
authorPepi Zawodsky <git@maclemon.at>
Thu, 28 Nov 2013 12:58:15 +0000 (13:58 +0100)
committerPepi Zawodsky <git@maclemon.at>
Thu, 28 Nov 2013 12:58:15 +0000 (13:58 +0100)
src/practical_settings/webserver.tex

index 7e160b9..3000459 100644 (file)
@@ -129,7 +129,7 @@ lighttpd httpS:// redirection: \url{http://redmine.lighttpd.net/projects/1/wiki/
 If you decide to trust NIST's ECC curve recommendation, you can add the following line to nginx's configuration file to select special curves:
 
 \begin{lstlisting}[breaklines]
-  ssl_ecdh_curve          sect571k1;
+  ssl_ecdh_curve          secp384r1;
 \end{lstlisting}
 
 You should redirect everything to httpS:// if possible. In Nginx you can do this with the following setting:
@@ -244,4 +244,4 @@ Not supported Clients:
 \item[How to test:] See ssllabs in section \ref{section:Tools}
 
 
-\end{description}
\ No newline at end of file
+\end{description}