tree 16f6f91786b9d98469f4e3886528ffc7199bb7e4
parent 49fecd9f474f7393e2ded00ff13396375bce3449
author Willy Tarreau <w@1wt.eu> 1588923078 +0200
committer Willy Tarreau <w@1wt.eu> 1588923397 +0200
encoding latin1

MEDIUM: ssl: increase default-dh-param to 2048

For 6 years now we've been seeing a warning suggesting to set dh-param
beyond 1024 if possible when it was not set. It's about time to do it
and get rid of this warning since most users seem to already use 2048.
It will remain possible to set a lower value of course, so only those
who were experiencing the warning and were relying on the default value
may notice a change (higher CPU usage). For more context, please refer
to this thread :

  https://www.mail-archive.com/haproxy@formilux.org/msg37226.html

This commit removes a big chunk of code which happened to be needed
exclusively to figure if it was required to emit a warning or not :-)