certmanager: Set ssl.curve to 'secp384r1' by default, to enable ECC ciphers

diff --git a/core/certmanager.lua b/core/certmanager.lua
index f9a54cb1ed53220243021e2a675c8e95c0bf6c3c..905a03cdae756d24e60e8590175c78ca20791f57 100644 (file)
--- a/core/certmanager.lua
+++ b/core/certmanager.lua
@@ -62,7 +62,7 @@ function create_context(host, mode, user_ssl_config)
                verifyext = user_ssl_config.verifyext or default_verifyext;
                options = user_ssl_config.options or default_options;
                depth = user_ssl_config.depth;
-               curve = user_ssl_config.curve;
+               curve = user_ssl_config.curve or "secp384r1";
                dhparam = user_ssl_config.dhparam;
        };