Ubuntu
apache2 package

  1. Bug #1197884
  2. Comment #33

Comment 33 for bug 1197884

Revision history for this message
In , Hiding-l (hiding-l) wrote :

(In reply to Kaspar Brand from comment #8)

I applied your patch in my testing environment with httpd-2.4.6 and it works as advertised. After appending DH parameters to the certificate file, all DH ciphers were using the expected key size.

I found it a bit confusing that you actually have to put the params alongside your certificate into one file. One has to pay more attention to these additional settings on changing the certificate.

But if it is actually way more easy to implement DH / ECDHE parameters this way, then it is probably the way to go.