Skip to content

add ecdh curves to gateway server TLS settings#3700

Open
ramaraochavali wants to merge 1 commit into
istio:masterfrom
ramaraochavali:fix/ecdh_curves
Open

add ecdh curves to gateway server TLS settings#3700
ramaraochavali wants to merge 1 commit into
istio:masterfrom
ramaraochavali:fix/ecdh_curves

Conversation

@ramaraochavali

Copy link
Copy Markdown
Contributor

No description provided.

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
@ramaraochavali ramaraochavali requested a review from a team as a code owner May 3, 2026 08:53
@ramaraochavali ramaraochavali added the release-notes-none Indicates a PR that does not require release notes. label May 3, 2026
@istio-testing istio-testing added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label May 3, 2026
@ramaraochavali

Copy link
Copy Markdown
Contributor Author

@istio/technical-oversight-committee can you PTAL?

// Optional: If specified, only support the specified ecdh curves.
// Otherwise default to the default ecdh list supported by Envoy
// as specified [here](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/transport_sockets/tls/v3/common.proto).
repeated string ecdh_curves = 17;

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Curious what will happen if the proxy does not support these curves

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The config is rejected at run time - same as cipher suites

@istio-testing istio-testing added the needs-rebase Indicates a PR needs to be rebased before being merged label Jul 8, 2026
@istio-testing

Copy link
Copy Markdown
Collaborator

PR needs rebase.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-rebase Indicates a PR needs to be rebased before being merged release-notes-none Indicates a PR that does not require release notes. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants