8335b1
diff --git a/modules/ssl/ssl_engine_init.c b/modules/ssl/ssl_engine_init.c
8335b1
index 0275452..8efdcd7 100644
8335b1
--- a/modules/ssl/ssl_engine_init.c
8335b1
+++ b/modules/ssl/ssl_engine_init.c
8335b1
@@ -1144,11 +1144,16 @@ static void ssl_init_server_certs(server_rec *s,
8335b1
                      OBJ_nid2sn(nid), vhost_id, mctx->pks->cert_files[0]);
8335b1
     }
8335b1
     /*
8335b1
-     * ...otherwise, configure NIST P-256 (required to enable ECDHE)
8335b1
+     * ...otherwise, enable auto curve selection (OpenSSL 1.0.2 and later)
8335b1
+     * or configure NIST P-256 (required to enable ECDHE for earlier versions)
8335b1
      */
8335b1
     else {
8335b1
+#if defined(SSL_CTX_set_ecdh_auto)
8335b1
+        SSL_CTX_set_ecdh_auto(mctx->ssl_ctx, 1);
8335b1
+#else
8335b1
         SSL_CTX_set_tmp_ecdh(mctx->ssl_ctx,
8335b1
                              EC_KEY_new_by_curve_name(NID_X9_62_prime256v1));
8335b1
+#endif
8335b1
     }
8335b1
 #endif
8335b1
 }