If httpd is put in front of a reverse proxy of grafana. I seem to get some
http/1.1 js requests become http/1.0 bad requests.

Perhaps related
"http://daemonforums.org/showthread.php?p=68392";

With relayd there is no problem.

However relayd seems to not like the nistp521 keys that httpd was quite happy 
with.

I get "key size 1128 not support" from relayd

https://cvsweb.openbsd.org/src/usr.sbin/relayd/ssl.c?rev=1.34&content-type=text/x-cvsweb-markup

The tls priv sep is the main reason I am using relayd/httpd, so I am not
complaining about this hack. Gos http server is good but doesn't protect the
key, so well.

I assume switching to RSA, is the only answer? Anything below nistp521 would be
more prone than RSA to quantum attacks, if they ever actually happen anyway.

Or is there a diff for httpd that could be adapted to relayd?

Reply via email to