commit 892f3a5cf80f2aa3d5d2745396bf3c52c418c435
from: Omar Polo <op@omarpolo.com>
date: Fri Jun 09 20:43:12 2023 UTC

gencert: use secp384r1

prime256v1 should be perfectly fine for all I understand, but
OpenBSD' acme-client uses secp384r1 and who am I to disagree :)

commit - 7fff8aa6cb567a62113d9877af5bcb5bb4494111
commit + 892f3a5cf80f2aa3d5d2745396bf3c52c418c435
blob - 20ce1def2217049b03d3932892e15a62c72c124f
blob + 64dce1f01b18e8e36f4a6f090908aefd01007456
--- contrib/gencert
+++ contrib/gencert
@@ -80,7 +80,7 @@ if [ -f "$pem" -o -f "$key" ]; then
 fi
 
 if [ $ec = yes ]; then
-	openssl ecparam -name prime256v1 -genkey -noout -out "${key}" && \
+	openssl ecparam -name secp384r1 -genkey -noout -out "${key}" && \
 	openssl req -new -x509 -key "${key}" -out "${pem}" -days "${days}" \
 		-nodes -subj "/CN=$hostname"
 else