]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: ssl: replace standards DH groups with custom ones
authorRemi Gacogne <rgacogne@aquaray.fr>
Fri, 29 May 2015 14:26:17 +0000 (16:26 +0200)
committerWilly Tarreau <w@1wt.eu>
Sun, 31 May 2015 20:41:28 +0000 (22:41 +0200)
commitd3a341a96fb6107d2b8e3d7a9c0afa2ff43bb0b6
tree2bcc7a3b9e2a5d5f48ea5e012af2be6375dadf9c
parent47783ef05b3516d3ef7d590a772c859d36d54f61
MEDIUM: ssl: replace standards DH groups with custom ones

It is likely that powerful adversaries have been pre-computing the
standardized DH groups, because being widely used have made them
valuable targets. While users are advised to generate their own
DH parameters, replace the ones we ship by values been randomly
generated for this product only.

[wt: replaced dh1024_p, dh2048_p, and dh4096_p with locally-generated
 ones as recommended by RĂ©mi]
src/ssl_sock.c