Re: [users@httpd] How to use DH 4096 parameters?

2022-03-13 Thread Walter Hop
Hi William, >> I’m confused where the DH 3072 comes from. My question is, what should I >> configure so that DH 4096 is sent? > > Is your DH file actually 4096 bits? ;) It appears to be so when i look at the dhparams.pem file: openssl dhparam -inform PEM -in /etc/apache2/dhparam.pem -check

Re: [users@httpd] How to use DH 4096 parameters?

2022-03-13 Thread William Edwards
Hi! > Op 13 mrt. 2022 om 15:54 heeft Walter Hop het > volgende geschreven: > > Hi all, > > I am trying to strengthen my HTTPS setup. > > One security-checker which is popular in my country is internet.nl. And rightly so! > One thing I have a problem with is their check “Key exchange

[users@httpd] How to use DH 4096 parameters?

2022-03-13 Thread Walter Hop
Hi all, I am trying to strengthen my HTTPS setup. One security-checker which is popular in my country is internet.nl . One thing I have a problem with is their check “Key exchange parameters”. On my old setup, this was DH 2048, which is considered “insufficient” according