Skip to content
This repository has been archived by the owner on Nov 30, 2021. It is now read-only.

feat(router): add Diffie-Hellman parameter for DHE ciphersuites #3872

Merged
merged 1 commit into from Jun 18, 2015

Conversation

wenzowski
Copy link
Contributor

The openssl defaults for Ephemeral Diffie-Hellman exchange are considered by some to be inadequate.

Generate a 2048-bit key and upload to the cluster with:

openssl dhparam -out ./dhparam.pem 2048
deisctl config router set sslDhparam=./dhparam.pem

@wenzowski wenzowski changed the title feature(router): add Diffie-Hellman parameter for DHE ciphersuites feat(router): add Diffie-Hellman parameter for DHE ciphersuites Jun 16, 2015
@carmstrong
Copy link
Contributor

Code LGTM.

@technosophos
Copy link
Member

So this will simply allow admins to define parameters for their Ephemeral DH generation? AFAIK, numbits is the only thing you can set for this, right? I'm good with that.

LGTM

@wenzowski
Copy link
Contributor Author

@technosophos yes numbits is the only required param

carmstrong added a commit that referenced this pull request Jun 18, 2015
feat(router): add Diffie-Hellman parameter for DHE ciphersuites
@carmstrong carmstrong merged commit a4f0bbc into deis:master Jun 18, 2015
@mboersma mboersma modified the milestone: v1.8 Jun 19, 2015
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants