CURLOPT_ECH.md: simplify the description language

It no longer requires "a special build" of OpenSSL, just OpenSSL 4+.

Emphasize the experimental part a little clearer.

Drop the caveat for wolfSSL from the main description.

Closes #21536
This commit is contained in:
Daniel Stenberg 2026-05-08 13:13:20 +02:00
parent b174b8b326
commit d656ff9458
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2

View file

@ -29,15 +29,11 @@ CURLcode curl_easy_setopt(CURL *handle, CURLOPT_ECH, char *config);
# DESCRIPTION
This feature is **experimental** and may change before it is considered
stable. We advise against using it in production.
ECH is only compatible with TLSv1.3.
This experimental feature requires a special build of OpenSSL, as ECH is not
yet supported in OpenSSL releases. In contrast ECH is supported by the latest
BoringSSL, wolfSSL and Rustls-ffi releases.
There is also a known issue with using wolfSSL which does not support ECH when
the HelloRetryRequest mechanism is used.
Pass a string that specifies configuration details for ECH. In all cases, if
ECH is attempted, it may fail for various reasons. The keywords supported are: