From 095f98c375cff83eaa3ce29485c11e1d789f21a9 Mon Sep 17 00:00:00 2001 From: Michael Baentsch <57787676+baentsch@users.noreply.github.com> Date: Wed, 17 Jan 2024 15:45:14 +0100 Subject: [PATCH] document KEX=* semantics --- nginx/fulltest/index-template | 1 + 1 file changed, 1 insertion(+) diff --git a/nginx/fulltest/index-template b/nginx/fulltest/index-template index 1a61e65c..8ea63862 100644 --- a/nginx/fulltest/index-template +++ b/nginx/fulltest/index-template @@ -82,6 +82,7 @@ tr:nth-child(even) {

For automated testing, a JSON file encoding all available SIG/KEM combinations and the respective ports where they can be found is available for download here. We explicitly want to warn that algorithm/port combinations are subject to change. Be sure to download the most current JSON file before testing.

+

Note: The designator "*" below for key exchange algorithms should not be understood that the port referenced supports any possible KEM, but only all those KEMs configured into the underlying nginx server as default groups. This can be set when building the server via the DEFAULT_GROUPS configuration option. The default algorithm list is x25519:x448:kyber512:p256_kyber512:kyber768:p384_kyber768:kyber1024:p521_kyber1024.