OpenVPN Support Forum

ok. thanks for clarification. Indeed I have tested successfully TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384. So we still have to use RSA keys and only EC algo can be used for keys exchange - small but still progress. It should shave some time from keys exchange at least.

I hope that ECDSA support is coming any time soon - plenty of people including myself waiting for full EC support.

also ECDHE was already supported in 1.1.1 so effectively there is no change on elliptic curve crypto front:(