# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1506519907 -7200
# Node ID 92cddfe65003b0959c3f64765ee2c346469ee5aa
# Parent  a349299038ff78486a1164dfece7bd42f453220c
core.certmanager: Set a default curveslist [sic], fixes #879, #943, #951 if used along with luasec 0.7 and openssl 1.1

diff -r a349299038ff -r 92cddfe65003 core/certmanager.lua
--- a/core/certmanager.lua	Wed Sep 27 15:38:46 2017 +0200
+++ b/core/certmanager.lua	Wed Sep 27 15:45:07 2017 +0200
@@ -107,6 +107,12 @@
 	};
 	verifyext = { "lsec_continue", "lsec_ignore_purpose" };
 	curve = "secp384r1";
+	curveslist = {
+		"X25519",
+		"P-384",
+		"P-256",
+		"P-521",
+	};
 	ciphers = {      -- Enabled ciphers in order of preference:
 		"HIGH+kEDH",   -- Ephemeral Diffie-Hellman key exchange, if a 'dhparam' file is set
 		"HIGH+kEECDH", -- Ephemeral Elliptic curve Diffie-Hellman key exchange