[Issue 10181] No support for setting allowed signature algorithms or groups/curves for OpenSSL TLS handshake

https://bugs.openldap.org/show_bug.cgi?id=10181

--- Comment #3 from Howard Chu hyc@openldap.org --- You really believe there's a use case for a specific TLS-enabled service to use different signature algorithms or curves than every other service on a machine?

Setting the certificate/key is essential for a TLS-enabled service, and it's commonplace for an LDAP server to use different certs than other co-hosted services like web servers. It's not commonplace for every service to choose their own elliptic curve or to choose weaker signature algorithms than other services.

This ticket is closed.