Add support for multiple elliptic curves
|Reported by:||Owned by:|
|Keywords:||tls, elliptic, curve, ecc, ec||Cc:|
Curve25519 is about to land in Chrome 50: https://www.chromestatus.com/feature/5682529109540864
nginx currently does not allow to use more than one curve.
We can't use Curve25519 as a lot of clients will not support it.
Allowing several curves with server preference would help to improve security and compatibility.
ssl_ecdh_curve brainpoolP512r1 secp521r1 prime256v1;
Also see this request: https://forum.nginx.org/read.php?10,263871,263871