> The above is jumbled because your mail client is BROKEN and top-posts, even > when replying to your own posts. If it isn't worth your effort to fix that, > it might not be worth the effort of those who might reply to actually respond.
My e-mail client is just fine. It is the mailing-list software that is broken. > To answer your questions: > - there was no change to httpd, > - there was a change to libressl, > - Yes, ECDHE is still supported. OK > You state you "do not want automatic selection of the curve". If you are > that invested in the question then you should be reading the full commit > messages sent to to the public source-chan...@openbsd.org mailling lists and > not just tedu@'s summaries, as he elided much of the commit message. I am invested in it. My whole business depends on libressl, and each change in their API triggers much pain all the way up to a 500MB system that needs to be patched and re-compiled. libressl changes hit me when the portable source is released from github, because the libressl list happens to be a closed club. > The full commit message was: [...] So yes, it's possible for a program using > the libressl API to configure the EC used. Whether any given program using > libressl actually *does so* is up to that program, of course. Ok thanks.