Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Date: Wed, 10 Aug 2011 14:55:13 +0300
From: yyy <yyy@yyy.id.lv>
Reply-To: yyy <yyy@yyy.id.lv>
Message-ID: <1224198667.20110810145513@yyy.id.lv>
To: users@httpd.apache.org
In-Reply-To: <20110810100837.GD2387@palma.openstrike.co.uk>
References: <1212853262.20110810125329@yyy.id.lv>
 <20110810100837.GD2387@palma.openstrike.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] DH parameters

Wednesday, August 10, 2011, 1:08:37 PM, you wrote:
> On Wed, Aug 10, 2011 at 12:53:29PM +0300, yyy wrote:
>> How to specify custom DH parameters for mod_ssl?

> [snip]

>> The FAQ of this list (http://httpd.apache.org/docs/misc/FAQ.html) is a 404.
>> Search function for mailing list archives did not take 2 character keywords (DH), they were ignored.

> That the FAQ is missing is a major problem. Hopefully someone with
> access to that page can sort it out.

> A 2 character search term is going to produce a lot of results, even if
> it were acceptable to the search system. However, you can easily get around
> this by using a more specific search term. See for example this:

> http://httpd.markmail.org/search/?q=%22dh%20parameters%22

> which produced a manageable set of results. Hopefully one of those will
> give the information you need.

> Best of luck,

> Pete

There were 166 results.
Most of these results were openssl s_server (or something similar)
outputs (using default DH params) and generating temp DH params
some were about making FIPS compliant version, which skips
generating temp DH params. These 3 groups were 95+% of results
There were some source patches (at the end) and this thread
(at the beginning).

I know, that mod_gnutls has a directive for specifying DH parameters,
but mod_gnults is not available for windows.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org