We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
There are several instances where Froxlor 2.2.0 runs or advises the user to run openssl dhparam to generate a DH group when configuring TLS.
openssl dhparam
It is generally preferable to not use any custom-generated DH groups at all, and to simply use one of the FFDHE groups from RFC7919 instead:
https://wiki.mozilla.org/Security/Archive/Server_Side_TLS_4.0#Pre-defined_DHE_groups
Instances of openssl dhparam that I've found:
The text was updated successfully, but these errors were encountered:
197eb79
dont generate dhparam file as fallback but use defined FFDHE4096 group;
57206b2
fixes #1270 Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
d00p
No branches or pull requests
There are several instances where Froxlor 2.2.0 runs or advises the user to run
openssl dhparam
to generate a DH group when configuring TLS.It is generally preferable to not use any custom-generated DH groups at all, and to simply use one of the FFDHE groups from RFC7919 instead:
https://wiki.mozilla.org/Security/Archive/Server_Side_TLS_4.0#Pre-defined_DHE_groups
Instances of
openssl dhparam
that I've found:The text was updated successfully, but these errors were encountered: