Skip to content

Commit ebad50c

Browse files
committed
gh-109945 update documentation
Signed-off-by: Nigel Jones <jonesn@uk.ibm.com>
1 parent 8ec8608 commit ebad50c

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed

Doc/library/ssl.rst

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1763,11 +1763,12 @@ to speed up repeated connections from the same clients.
17631763

17641764
.. method:: SSLContext.set_ecdh_curve(curve_name)
17651765

1766-
Set the curve name for Elliptic Curve-based Diffie-Hellman (ECDH) key
1766+
Set the curve names for Elliptic Curve-based Diffie-Hellman (ECDH) key
17671767
exchange. ECDH is significantly faster than regular DH while arguably
1768-
as secure. The *curve_name* parameter should be a string describing
1769-
a well-known elliptic curve, for example ``prime256v1`` for a widely
1770-
supported curve.
1768+
as secure. The *curve_name* parameter should be a colon separated string describing
1769+
one or more well-known elliptic curves, for example ``prime256v1`` for a widely
1770+
supported curve, or ``prime256v1:brainpoolP384r1`` to specify two curves that will be
1771+
used on a client hello.
17711772

17721773
This setting doesn't apply to client sockets. You can also use the
17731774
:data:`OP_SINGLE_ECDH_USE` option to further improve security.

0 commit comments

Comments
 (0)