[FEATURE REQUEST] - order of "ecccurvebindings"

[adc-nerd]

Feature Request

Is your feature request related to a problem? Please describe. ECC curve binding order should be honored. There is a difference between: resource "citrixadc_sslprofile" "my_sslprofile" { ecccurvebindings = ["P_256", "P_384", "P_521"] ... } and resource "citrixadc_sslprofile" "my_sslprofile" { ecccurvebindings = ["P_521", "P_384", "P_256"] ... }

Describe the solution you'd like Ecc curve binding order should be observed. Provider need to unbind/bind ecc curves to accomblish binding order.

Additional context ECC curve order is security and performance related.

[rohit-myali]

Hey @adc-nerd I just wanted to confirm this, I had a conversation with the internal team here, but I found that the order doesn't make any difference in the ecccurve binding to the sslprofile. Please check this again and update me on this.

[adc-nerd]

The curve binding order is security and performance related. It's like cipher order.

https://support.citrix.com/article/CTX205289/ "To change the order, you must first unbind all the curves, and then bind them in the desired order."