On Fri, 22 May 2015 07:07:13 AM Sam Varshavchik wrote: > > openssl dhparam -out /etc/ssl/dhparam.pem 2048 > > mkdhparams already defaults to 2048 bit DH keys.
FWIW, maybe I have an old one but unless I do this I still get a 768bit DH param file... ~ rm /etc/courier/dhparams.pem ~ export DH_BITS=2048; mkdhparams 512 semi-random bytes loaded Generating DH parameters, 2048 bit long safe prime, generator 2 vs ~ rm /etc/courier/dhparams.pem ~ mkdhparams 512 semi-random bytes loaded Generating DH parameters, 768 bit long safe prime, generator 2 courier-ssl 0.73.1-1.3+deb.sury.org~utopic+2 ------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y _______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
