3 ms·
Unfortunately RedHat (and by extension, CentOS) [edit: prior to RHEL/CentOS 6.5] strips elliptic curve crypto out of OpenSSL, so the list of ciphers you linked
by agwa 13y ago
Unfortunately RedHat (and by extension, CentOS) [edit: prior to RHEL/CentOS 6.5] strips elliptic curve crypto out of OpenSSL, so the list of ciphers you linked to is not accurate. For PFS on CentOS you're stuck with the slower discrete log Diffie Hellman.
Edited to add: my information is out of date! See ivanr's reply.
- ivanr 13y agoIt used to. As far as I know RHEL 6.5 was the first to enable Elliptic Curve cryptography by default. Fedora 18 and later were updated to support it, too. For more details, see here: https://bugzilla.redhat.com/show_bug.cgi?id=319901 https://bugzilla.redhat.com/show_bug.cgi?id=319901