[issue21015] support SSL_CTX_set_ecdh_auto on newer OpenSSLs

[Donald Stufft]

Donald Stufft added the comment:

Heh, I was just getting ready to figure out if I should write this ticket or not :)

I think we should do this. Nginx also defaults to prime256v1 (which is NIST P-256), DJB seems to think that's an unsafe curve though (http://safecurves.cr.yp.to/).

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue21015>
_______________________________________