Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Is it possible to configure Apache2 to use elliptic curve crypto (ecc) with SSL? This bug https://issues.apache.org/bugzilla/show_bug.cgi?id=40132 appears (to me) to indicate that this is supported, but I can't find any instructions anywhere.

share|improve this question

3 Answers 3

Or rather look here http://httpd.apache.org/docs/2.4/mod/mod_ssl.html

Support for EC Key Exchange has been added here.

share|improve this answer
    
Welcome to Server Fault! Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference. –  Scott Pack Sep 12 '13 at 13:51

It doesn't look like it. You can find a list of supported Ciphers here: http://httpd.apache.org/docs/2.0/mod/mod_ssl.html#sslciphersuite

share|improve this answer

Apache 2.4 has the support for ECC in the trunk and you could download or update or build those versions of Apache. Also, if you would like to use ECC then you would also need a OpenSSL version that provides the plumbing for it. Also the OpenSSL version should have the optimizations that Google engineers have contributed for speeding up ECC operations. For more details on Apache and OpenSSL (building with ECC), please see:

http://khanna111.com/wordPressBlog/2012/09/11/94087-2/

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.