[packages/lighttpd] add dhparam gen command

glen glen at pld-linux.org
Mon Oct 30 21:03:15 CET 2017


commit 85a9ac3063e1b572e172696db5c7586feea11581
Author: Elan Ruusamäe <glen at pld-linux.org>
Date:   Mon Oct 30 22:03:03 2017 +0200

    add dhparam gen command

 ssl.conf | 2 ++
 1 file changed, 2 insertions(+)
---
diff --git a/ssl.conf b/ssl.conf
index c63822b..e9c1a21 100644
--- a/ssl.conf
+++ b/ssl.conf
@@ -20,6 +20,8 @@ $SERVER["socket"] == ":443" {
 #	ssl.ca-file = "/etc/lighttpd/ssl/chain.pem"
 
 	# for DH/DHE ciphers, dhparam should be >= 2048-bit
+	# Generate with:
+	# openssl dhparam -out dh2048.pem -outform PEM -2 2048
 #	ssl.dh-file = "/etc/lighttpd/ssl/dhparam.pem"
 	# ECDH/ECDHE ciphers curve strength (see `openssl ecparam -list_curves`)
 #	ssl.ec-curve = "secp384r1"
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/lighttpd.git/commitdiff/85a9ac3063e1b572e172696db5c7586feea11581



More information about the pld-cvs-commit mailing list