ecdh group

Function

The ecdh group command configures elliptic curve parameter values for ECDHE algorithm suite.

The undo ecdh group command restores the default values of the parameters of the elliptic curve.

By default, the default elliptic curve parameter values of the ECDHE algorithm are Curve and Brainpool.

ecdh group { nist | curve | brainpool } ^*

undo ecdh group

Parameter	Description	Value
nist	Sets the parameter value of the elliptic curve to Nist.	-
curve	Sets the parameter value of the elliptic curve to Curve.	-
brainpool	Sets the elliptic curve parameter to Brainpool.	-

Parameter

Description

Value

nist

Sets the parameter value of the elliptic curve to Nist.

curve

Sets the parameter value of the elliptic curve to Curve.

brainpool

Sets the elliptic curve parameter to Brainpool.

SSL policy view

3: Management level

Task Name	Operations
ssl	write

Usage Scenario

You can run this command to modify the elliptic curve parameter settings of the ECDHE algorithm.

Precautions

One or more elliptic curve parameter values can be configured for ECDHE.

The configured elliptic curve parameter values take effect only after the ECDHE algorithm suite is obtained through SSL negotiation.

# Configure the ecdh group parameter for an SSL policy.

<HUAWEI> system-view
[~HUAWEI] ssl policy a
[*HUAWEI-ssl-policy-a] ecdh group nist curve brainpool