Accepting request 321967 from home:kstreitova:branches:Apache
- fix Logjam vulnerability (follows the https://weakdh.org/sysadmin.html guide) Change SSLCipherSuite cipherstring to disable export cipher suites and deploy Ephemeral Elliptic-Curve Diffie-Hellman (ECDHE) ciphers. Adjust 'gensslcert' script to generate a strong and unique Diffie Hellman Group and append it to the server certificate file [bnc#931723], [CVE-2015-4000] OBS-URL: https://build.opensuse.org/request/show/321967 OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=458
This commit is contained in:
@@ -193,6 +193,9 @@ if [ $? -ne 0 ]; then
|
||||
myexit $LINENO $?
|
||||
fi
|
||||
|
||||
echo;myecho generating dhparams and appending it to the server certificate file...
|
||||
openssl dhparam 2048 >> $sslcrtdir/${name}server.crt
|
||||
|
||||
|
||||
exit 0
|
||||
|
||||
|
Reference in New Issue
Block a user