Commit Graph

3 Commits

Author SHA1 Message Date
Ben Pfaff 5f9a684de5 Add 1024-bit Diffie-Hellman parameters to vconn-ssl.
1024-bit Diffie-Hellman is somewhat weak, but I haven't been able to
figure out how to make OpenSSL use longer Diffie-Hellman keys than that.
If this isn't available, OpenSSL doesn't let connections proceed.

This change should be reverted when we figure out how to make OpenSSL
use longer Diffie-Hellman keys.
2008-03-27 17:50:33 -07:00
Ben Pfaff fc1ff3f88a Remove support for 512- and 1024-bit Diffie-Hellman.
As Justin points out, these key lengths are too low-security to be acceptable
any longer.
2008-03-19 09:37:11 -07:00
Ben Pfaff cf6207b610 Support SSL in secchan and controller. 2008-03-13 15:17:45 -07:00