• Peter Eisentraut's avatar
    SSL: Support ECDH key exchange · 31647214
    Peter Eisentraut authored
    This sets up ECDH key exchange, when compiling against OpenSSL that
    supports EC.  Then the ECDHE-RSA and ECDHE-ECDSA cipher suites can be
    used for SSL connections.  The latter one means that EC keys are now
    usable.
    
    The reason for EC key exchange is that it's faster than DHE and it
    allows to go to higher security levels where RSA will be horribly slow.
    
    There is also new GUC option ssl_ecdh_curve that specifies the curve
    name used for ECDH.  It defaults to "prime256v1", which is the most
    common curve in use in HTTPS.
    
    From: Marko Kreen <markokr@gmail.com>
    Reviewed-by: default avatarAdrian Klaver <adrian.klaver@gmail.com>
    31647214
guc.c 224 KB