From: Doug MacEachern <dougm@apache.org>
Date: Tue, 26 Mar 2002 17:29:36 +0000 (+0000)
Subject: note about the temporary DH keys
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c1bf87465baa7fe6963b6888261ba458cb452a29;p=thirdparty%2Fapache%2Fhttpd.git

note about the temporary DH keys


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94181 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/README b/README
index e39b47471dc..7281c3bbce2 100644
--- a/README
+++ b/README
@@ -176,3 +176,7 @@
    -is ssl_expr_eval() if there is an error
     (ssl_expr_error is global)
  o SSLRequire directive (parsing of) leaks memory
+ o Diffie-Hellman-Parameters for temporary keys are hardcoded in
+   ssl_engine_dh.c, while the comment in ssl_engine_kernel.c says:
+   "it is suggested that keys be changed daily or every 500
+    transactions, and more often if possible."