specifying elliptic curve

Ruga ruga at protonmail.com
Mon Aug 22 21:57:28 UTC 2016


+1

I opened a ticket (a while ago) to add manual selection of the curves.


On Mon, Aug 22, 2016 at 6:59 PM, Aki Tuomi <'aki.tuomi at dovecot.fi'> wrote:
On 22.08.2016 16:21, İhsan Doğan wrote:
> Hi,
>
> I've noticed that Dovecot is using per default the elliptic curve
> sect571r1. Because not all clients might support sect571r1, I would like
> to set the elliptic curve manually. Is that possible?
>
>
>
> -Ihsan
>

Hi!

If your openssl does not support automatic curve selection (>=1.0.2), we
fall back to using what your private EC key uses, or NIST-P384 as last
resort.

Aki Tuomi
Dovecot oy


More information about the dovecot mailing list