Hi, is there a chance to get the following revisions merged to 2.2.x - r1551685, r1652929 (fix IPv4 mapping on FreeBSD)
In ssl_engine_dh.c there are calls to generate dh512 and dh1012, perhaps it is also an idea to drop dh512 and add dh2048 or higher. -system("openssl gendh $rand -out dh512.pem 512"); -system("openssl gendh $rand -out dh1024.pem 1024"); +system("openssl gendh $rand -out dh1024.pem 1024"); +system("openssl gendh $rand -out dh2048.pem 2048"); PS: on my local 2.2.x test system 'ab.c' from 2.4.13 build fine, perhaps this is also a candidate for a next 2.2.x release. -- olli