[Ach] Help - Question - help - applied-crypto-hardening.pdf - . - -

[Daniel Kahn Gillmor]

On Thu 2015-02-05 19:36:24 -0500, Adi Kriegisch wrote:
> Apache 2.2 does not offer configurable DH parameters and is limited to
> 1024bit DH params. The Debian maintainers backported elliptic curve support
> to this version of Apache but not the dhparam support (which is most
> probably alot more work).

Is there a debian bug report requesting the improved DH support for
apache 2.2 in wheezy?  If it's something i can help push for, i'd be
happy to do so.  i don't like the idea of wheezy servers using 1024-bit
DHE for the remaining lifetime of the release (more than a year at
least).

      --dkg