list supported groups and curves
Jordan Brown
openssl at jordan.maileater.net
Thu Feb 22 20:48:04 UTC 2024
On 2/17/2024 11:01 AM, Wall, Stephen wrote:
>
> Is there a way to list the supported curves and groups with openssl?
> I saw nothing in the `openssl list` command. I’m interested mainly
> listing all the valid values for SSL_CTX_set1_group_list(). I see the
> man page for that function has a list of valid groups/curves for TLS
> 1.3, but also mentions providers can change that list, and does not
> give a list for valid curves in other TLS versions.
>
>
You don't say whether you want a C way to do it or a shell way to do
it. Somebody else gave the shell way: openssl ecparam -list_curves
The C way is using EC_get_builtin_curves()
<https://www.openssl.org/docs/man3.0/man3/EC_get_builtin_curves.html>.
--
Jordan Brown, Oracle ZFS Storage Appliance, Oracle Solaris
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20240222/36249347/attachment.htm>
More information about the openssl-users
mailing list