Accepting request 321967 from home:kstreitova:branches:Apache

- fix Logjam vulnerability (follows the https://weakdh.org/sysadmin.html guide)
  Change SSLCipherSuite cipherstring to disable export cipher suites
  and deploy Ephemeral Elliptic-Curve Diffie-Hellman (ECDHE) ciphers.
  Adjust 'gensslcert' script to generate a strong and unique Diffie
  Hellman Group and append it to the server certificate file
  [bnc#931723], [CVE-2015-4000]

OBS-URL: https://build.opensuse.org/request/show/321967
OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=458
This commit is contained in:
2015-08-12 07:21:37 +00:00
committed by Git OBS Bridge
parent 2e2a6b9dc1
commit f969280a56
3 changed files with 13 additions and 2 deletions

View File

@@ -193,6 +193,9 @@ if [ $? -ne 0 ]; then
myexit $LINENO $?
fi
echo;myecho generating dhparams and appending it to the server certificate file...
openssl dhparam 2048 >> $sslcrtdir/${name}server.crt
exit 0