Author pitrou
Recipients naif, pitrou
Date 2011-12-18.16:03:52
SpamBayes Score 3.94172e-07
Marked as misclassified No
Message-id <1324224293.51.0.798701813112.issue13626@psf.upfronthosting.co.za>
In-reply-to
Content
Well the OpenSSL docs say “DH_generate_parameters() may run for several hours before finding a suitable prime”, which sounds like a good reason not to do it every time your program is run.

Anyway, SSL_CTX_set_tmp_dh() should allow us to set DH parameters on a SSL context, PEM_read_DHparams() to read them from a PEM file, and OpenSSL's source tree has a couple of PEM files with "strong" DH parameters for various key sizes.
History
Date User Action Args
2011-12-18 16:04:53pitrousetrecipients: + pitrou, naif
2011-12-18 16:04:53pitrousetmessageid: <1324224293.51.0.798701813112.issue13626@psf.upfronthosting.co.za>
2011-12-18 16:03:52pitroulinkissue13626 messages
2011-12-18 16:03:52pitroucreate