mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-01-13 15:13:33 +01:00
Add support for appending custom EC/DH parameters #158
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @lumag on GitHub (Nov 13, 2016).
According to mod_ssl documentation it is possible to instruct Apache2 to use custom DH parameters or EC curve by appending that data to first certificate specified by
SSLCertificateFile. Please add support for adding such data. Thanks!@leonklingele commented on GitHub (Nov 13, 2016):
Why not use the dedicated Apache directives for doing that?
You can specify the curve to use for ECDH via:
SSLOpenSSLConfCmd ECDHParameters [curve-name]and specify the parameters for DH via:
SSLOpenSSLConfCmd DHParameters /path/to/dhparams.pem@lumag commented on GitHub (Nov 13, 2016):
This directive is not available with OpenSSL < 1.0.2 (and that is not the case e.g. for Debian Jessie).
@welwood08 commented on GitHub (Nov 16, 2016):
This is already possible using the deploy_cert hook. Just append what you need to the cert file before you deploy it to apache.