Re: Weak Diffie-Hellman default in nginx port

2015-07-21 Thread lophos
El Tue, 21 de Jul de 2015, a las 12:55:42PM +0200, Denis Fondras dijo: > On Tue, Jul 21, 2015 at 12:31:33PM +0200, lophos wrote: > > The nginx config (although disabled by default) supports weak Diffie > > Hellman cipher according to ssllabs.com test > > (Grade B). > > > > You'd better generate

Re: Weak Diffie-Hellman default in nginx port

2015-07-21 Thread Denis Fondras
On Tue, Jul 21, 2015 at 12:31:33PM +0200, lophos wrote: > The nginx config (although disabled by default) supports weak Diffie Hellman > cipher according to ssllabs.com test > (Grade B). > You'd better generate stronger DH-param than disable DHE.

Weak Diffie-Hellman default in nginx port

2015-07-21 Thread lophos
Hello. I want to suggest this patch for /etc/nginx/nginx.conf in OpenBSD 5.7. The nginx config (although disabled by default) supports weak Diffie Hellman cipher according to ssllabs.com test (Grade B). --- nginx.conf Tue Jul 21 12:18:44 2015 +++ nginx.conf Tue Jul 21 10:52:27 2015 @@ -114,7