@indutny I will happily do so, if in return you would be so kind and first point out what I am doing wrong in the following issue. I originally stumbled upon this paragraph, because I was trying to set up perfect forward secrecy myself -- specifically the `ECDHE-ECDSA-AES256-GCM-SHA384` method. So I came up with this little proof of concept which should work from my point of view: https://gist.github.com/flowlo/8173955 OpenSSL s_server happily handshakes with OpenSSL s_client, but node does not using the same key and cert.