[gnutls-help] Restricting 224 and 192 curves

[Daniel Kahn Gillmor]

On Tue 2016-01-26 11:21:29 -0500, jonetsu wrote:

> Is it possible to disable the use of CURVE-SECP224R1 and
> CURVE-SECP192R1 at runtime (by a parameter or programmatically) ?

yes, you can set a priority string like
"NORMAL:-CURVE-SECP224R1:-CURVE-SECP192R1"

See http://gnutls.org/manual/gnutls.html#Priority-Strings for more
details.

        --dkg