Nginx + LibreSSL + ECDSA cert = Error


nginx mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx


nginx mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx

I’ve been using ECDSA without issue on 1.7.10 with LibreSSL 2.1.4.
Method to generate the key was:

openssl ecparam -out ec_key.pem -name secp384r1 -genkey
openssl req -newkey ec:ec_key.pem -nodes -sha256 -keyout
www.domain.tld.key
-new -out www.domain.tld.csr

 Then I'm declaring the DSA options in ssl_ciphers and defining

ssl_ecdh_curve:

ssl_ciphers
ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA;

ssl_ecdh_curve secp384r1;

[image: userimage]Scott Larson[image: los angeles]
https://www.google.com/maps/place/4216+Glencoe+Ave,+Marina+Del+Rey,+CA+90292/@33.9892151,-118.4421334,17z/data=!3m1!4b1!4m2!3m1!1s0x80c2ba88ffae914d:0x14e1d00084d4d09cLead
Systems Administrator[image: wdlogo] https://www.wiredrive.com/
[image:
linkedin] https://www.linkedin.com/company/wiredrive [image: facebook]
https://www.twitter.com/wiredrive [image: twitter]
https://www.facebook.com/wiredrive [image: instagram]
https://www.instagram.com/wiredriveT 310 823 8238 x1106
<310%20823%208238%20x1106> | M 310 904 8818 <310%20904%208818>

wrong curve?