From 897c10749d7976772c32ea27770443d50f08b892 Mon Sep 17 00:00:00 2001 From: Aaron Jones Date: Mon, 15 Aug 2016 10:53:23 +0000 Subject: [PATCH] README: Clarify that OpenSSL is not required for ECDHE --- README.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/README.md b/README.md index 81587f7d..2cfa2910 100644 --- a/README.md +++ b/README.md @@ -16,18 +16,18 @@ used with an IRCv3-capable services implementation such as [Atheme][atheme] or [ * For SSL/TLS client and server connections, one of: - * OpenSSL 1.0 or newer - * LibreSSL - * mbedTLS - * GnuTLS + * OpenSSL 1.0.0 or newer (--enable-openssl) + * LibreSSL (--enable-openssl) + * mbedTLS (--enable-mbedtls) + * GnuTLS (--enable-gnutls) - * For certificate-based oper CHALLENGE, OpenSSL 1.0 or newer. + * For certificate-based oper CHALLENGE, OpenSSL 1.0.0 or newer. (Using CHALLENGE is not recommended for new deployments, so if you want to use a different TLS library, feel free.) - * For ECDHE, OpenSSL 1.0.0 or newer is required. RHEL/Fedora and derivatives like CentOS - will need to compile OpenSSL from source, as ECC/ECDHE-functionality is removed from - the OpenSSL package in these distributions. + * For ECDHE under OpenSSL, on Solaris and RHEL/Fedora (and its derivatives such as CentOS) you will + need to compile your own OpenSSL on these systems, as they have removed support for ECC/ECDHE. + Alternatively, consider using another library (see above). # tips