| commit | d3a341a96fb6107d2b8e3d7a9c0afa2ff43bb0b6 | [log] [tgz] |
|---|---|---|
| author | Remi Gacogne <rgacogne@aquaray.fr> | Fri May 29 16:26:17 2015 +0200 |
| committer | Willy Tarreau <w@1wt.eu> | Sun May 31 22:41:28 2015 +0200 |
| tree | 2bcc7a3b9e2a5d5f48ea5e012af2be6375dadf9c | |
| parent | 47783ef05b3516d3ef7d590a772c859d36d54f61 [diff] |
MEDIUM: ssl: replace standards DH groups with custom ones It is likely that powerful adversaries have been pre-computing the standardized DH groups, because being widely used have made them valuable targets. While users are advised to generate their own DH parameters, replace the ones we ship by values been randomly generated for this product only. [wt: replaced dh1024_p, dh2048_p, and dh4096_p with locally-generated ones as recommended by Rémi]