Hi Markus,

>>> as far as i understood i need this if i use Diffie-Hellman to generate the
>>> session key. i need a special dh-key, right? if i don't use this i don't
>>> need to set the tune-ssl param.
>>
>> No, thats not really correct. You need the dh parameters for DHE ciphers and
>> that fact that this warning appears means that you are actually using them.
>>
> ok,
> not that i knew. but then, i have set it to 2048. message disappeared.

Well, you can also set it to 1024 and the message should disappear. The idea
behind this is that you consciously set this value to avoid sudden surprising
performance regressions.


Lukas

                                          

Reply via email to