note about the temporary DH keys

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94181 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/modules/ssl/README b/modules/ssl/README
index e39b47471dcb6ac7e611067561a6b4ca8991163c..7281c3bbce2acfff8950becf768061c9a0e41022 100644 (file)
--- a/modules/ssl/README
+++ b/modules/ssl/README
@@ -176,3 +176,7 @@
    -is ssl_expr_eval() if there is an error
     (ssl_expr_error is global)
  o SSLRequire directive (parsing of) leaks memory
+ o Diffie-Hellman-Parameters for temporary keys are hardcoded in
+   ssl_engine_dh.c, while the comment in ssl_engine_kernel.c says:
+   "it is suggested that keys be changed daily or every 500
+    transactions, and more often if possible."