From a888b332743e050d56d578b6433405c0638de2c4 Mon Sep 17 00:00:00 2001 From: Aaron Jones Date: Mon, 15 Aug 2016 10:51:04 +0000 Subject: [PATCH] README: Clarify that OpenSSL is not required for ECDHE --- README.md | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/README.md b/README.md index 24f0fbcd3..9cf8ae2ae 100644 --- a/README.md +++ b/README.md @@ -11,17 +11,18 @@ You will need to run `autogen.sh` to build the autotools files prior to building * For SSL/TLS client and server connections, one of: - * OpenSSL 1.0 or newer - * LibreSSL - * mbedTLS - * GnuTLS + * OpenSSL 1.0.0 or newer (--enable-openssl) + * LibreSSL (--enable-openssl) + * mbedTLS (--enable-mbedtls) + * GnuTLS (--enable-gnutls) - * For certificate-based oper CHALLENGE, OpenSSL 1.0 or newer. + * For certificate-based oper CHALLENGE, OpenSSL 1.0.0 or newer. (Using CHALLENGE is not recommended for new deployments, so if you want to use a different TLS library, feel free.) - * For ECDHE, OpenSSL 1.0.0 or newer is required. Solaris; and RHEL/Fedora and its derivatives such as CentOS - have removed support for ECC/ECDHE. You will need to compile your own OpenSSL on these systems. + * For ECDHE under OpenSSL, on Solaris and RHEL/Fedora (and its derivatives such as CentOS) you will + need to compile your own OpenSSL on these systems, as they have removed support for ECC/ECDHE. + Alternatively, consider using another library (see above). ## platforms