Thanks Matt, I could verify the certificate using OpenSSL as you suggested, 
but OpenSSL against Node with the certificate does not select ECDHE.

On Tuesday, June 25, 2013 3:44:47 PM UTC+2, Matt Sergeant wrote:
>
> This blog post I wrote yesterday might help you:
>
>
> http://baudehlo.wordpress.com/2013/06/24/setting-up-perfect-forward-secrecy-for-nginx-or-stud/
>
> It's written for nginx/stud, but from what I read of the Node docs on 
> TLS/SSL it should work out of the box (node's default ciphers includes 
> ECDHE) once you add in the randomness to your .pem file.
>
>
> On Tue, Jun 25, 2013 at 7:51 AM, Joran Dirk Greef 
> <[email protected]<javascript:>
> > wrote:
>
>> I am trying to get ECDHE as the default cipher for TLS connections in 
>> Node to achieve forward secrecy.
>>
>> Is this supported by Node by default?
>>
>> Does honorCipherOrder need to be set as a TLS option?
>>
>> Would one need to get a new public and private key (my current key is RSA 
>> 2048 bits)?
>>
>> Your help would be much appreciated.
>>
>> -- 
>> -- 
>> Job Board: http://jobs.nodejs.org/
>> Posting guidelines: 
>> https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
>> You received this message because you are subscribed to the Google
>> Groups "nodejs" group.
>> To post to this group, send email to [email protected]<javascript:>
>> To unsubscribe from this group, send email to
>> [email protected] <javascript:>
>> For more options, visit this group at
>> http://groups.google.com/group/nodejs?hl=en?hl=en
>>  
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "nodejs" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to [email protected] <javascript:>.
>> For more options, visit https://groups.google.com/groups/opt_out.
>>  
>>  
>>
>
>

-- 
-- 
Job Board: http://jobs.nodejs.org/
Posting guidelines: 
https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
You received this message because you are subscribed to the Google
Groups "nodejs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/nodejs?hl=en?hl=en

--- 
You received this message because you are subscribed to the Google Groups 
"nodejs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to