On 21/02/2014 13:13, Dr Stephen Henson wrote: > On 21/02/2014 13:02, Jeff Trawick wrote: >> Including [email protected]... >> >> Is anybody else seeing the same behavior? Looking at the documentation, 2.4.7 >> has gained some performance improvements, but I’m seeing something different >> on >> my end.____ >> > > Perhaps it's the increased DH parameter size? If it has increased from 1024 > bits > to 2048 that would have a significant effect. > > OpenSSL 1.0.2 s_client can help check this, if you do: > > openssl s_client -connect www.host.com:443 >
Correction, since the site is using OpenSSL 1.0.1f that command by itself may not be sufficient as ECDH is most likely to be used by default so it would need: openssl s_client -connect www.host.com:443 -cipher DH Steve. -- Dr Stephen Henson. OpenSSL Software Foundation, Inc. 1829 Mount Ephraim Road Adamstown, MD 21710 +1 877-673-6775 [email protected]
