[Ach] FYI: apache in Debian Stable has ECDH support now

Hanno Böck hanno at hboeck.de
Tue Jul 15 14:03:13 CEST 2014


On Tue, 15 Jul 2014 13:57:21 +0200
christian mock <cm at coretec.at> wrote:

>   * Backport support for SSL ECC keys and ECDH ciphers.
> 
> This means: fully supported modern crypto support with forward secrecy
> for about any relevant browser.

I think there's still a bunch of things missing. I haven't tested, do
they support tls 1.2 with gcm? What about DH exchange with reasonable
modulus size (> 1024 bit)? OCSP stapling?

Do you have a test server?

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno at hboeck.de
GPG: BBB51E42
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.cert.at/pipermail/ach/attachments/20140715/c5ab75a3/attachment.sig>


More information about the Ach mailing list