Add brainpool back to the TLS-Anvil policy file

randombit · randombit · commit 985d5650cef4 · 2026-06-28T07:35:05.000-04:00
diff --git a/src/scripts/tls_anvil/anvil_policy.txt b/src/scripts/tls_anvil/anvil_policy.txt
@@ -12,4 +12,4 @@ signature_methods = ECDSA RSA IMPLICIT
 
 require_extended_master_secret = false
 
-key_exchange_groups = secp256r1 secp384r1 secp521r1 x25519 ffdhe/ietf/2048
+key_exchange_groups = secp256r1 secp384r1 secp521r1 x25519 brainpool256r1 brainpool384r1 brainpool512r1 ffdhe/ietf/2048

Original file line number	Diff line number	Diff line change
`@@ -12,4 +12,4 @@ signature_methods = ECDSA RSA IMPLICIT`
`12`	`12`
`13`	`13`	`require_extended_master_secret = false`
`14`	`14`
`15`		`-key_exchange_groups = secp256r1 secp384r1 secp521r1 x25519 ffdhe/ietf/2048`
	`15`	`+key_exchange_groups = secp256r1 secp384r1 secp521r1 x25519 brainpool256r1 brainpool384r1 brainpool512r1 ffdhe/ietf/2048`