Centos 6.5 and ECDH ciphers in nginx.org Centos repo

[Maxim Dounin]

Hello!

On Mon, Jan 06, 2014 at 02:56:23PM +1100, Nick Jenkin wrote:

> Hi
> 
> In Centos 6.5 (and RHEL 6.5) the ECDH ciphers were enabled. 
> There appears to be an issue with the nginx.org 1.5.8 Centos 
> binaries still not having support for ECDHE despite having 
> updated openssl 1.01e with elliptic curves.
> 
> If I compile from source, ECDH works fine. Is there something 
> wrong with the centos binaries?
> 
> Ciphers on Centos 6.5:

[...]

This is expected.  Builds are done for CentOS 6, not just CentOS 
6.5, so they are done with OpenSSL as available in previous 
versions to ensure compatibility with previous versions of CentOS 6.

-- 
Maxim Dounin
http://nginx.org/