ecdh group

Format

ecdh group { nist | curve | brainpool } ^*

undo ecdh group

Parameter	Description	Value
nist	Sets the parameter value of the elliptic curve to Nist.	-
curve	Sets the parameter value of the elliptic curve to Curve.	-
brainpool	Sets the elliptic curve parameter to Brainpool.	-

Parameter

Description

Value

nist

Sets the parameter value of the elliptic curve to Nist.

-

curve

Sets the parameter value of the elliptic curve to Curve.

-

brainpool

Sets the elliptic curve parameter to Brainpool.

-

SSL policy view

3: Management level

Task Name	Operations
ssl	write

Usage Scenario

You can run this command to modify the elliptic curve parameter settings of the ECDHE algorithm.

Precautions

One or more elliptic curve parameter values can be configured for ECDHE.

The configured elliptic curve parameter values take effect only after the ECDHE algorithm suite is obtained through SSL negotiation.

# Configure the ecdh group parameter for an SSL policy.

<HUAWEI> system-view
[~HUAWEI] ssl policy a
[*HUAWEI-ssl-policy-a] ecdh group nist curve brainpool