| commit | 1f302db3e70f50f9b5e0860581a18e117eafcf20 | [log] [tgz] |
|---|---|---|
| author | Emilia Kasper <emilia@openssl.org> | Tue May 12 16:10:05 2015 +0200 |
| committer | Emilia Kasper <emilia@openssl.org> | Wed May 20 15:10:26 2015 +0200 |
| tree | 8a1a997d866de9c04cc9fe0ea68f6bb31355cba5 | |
| parent | b5a379aae5e05d18a17e41cd7591a038e21395eb [diff] |
Update documentation with Diffie-Hellman best practices. - Do not advise generation of DH parameters with dsaparam to save computation time. - Promote use of custom parameters more, and explicitly forbid use of built-in parameters weaker than 2048 bits. - Advise the callback to ignore <keylength> - it is currently called with 1024 bits, but this value can and should be safely ignored by servers. Reviewed-by: Rich Salz <rsalz@openssl.org>