From: Doug MacEachern <dougm@apache.org>
Date: Tue, 26 Mar 2002 17:29:36 +0000 (+0000)
Subject: note about the temporary DH keys
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=0ba4bcd81bea2f1d66695effd700f9ac7df70f9f;p=apache

note about the temporary DH keys


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94181 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/modules/ssl/README b/modules/ssl/README
index e39b47471d..7281c3bbce 100644
--- a/modules/ssl/README
+++ b/modules/ssl/README
@@ -176,3 +176,7 @@
    -is ssl_expr_eval() if there is an error
     (ssl_expr_error is global)
  o SSLRequire directive (parsing of) leaks memory
+ o Diffie-Hellman-Parameters for temporary keys are hardcoded in
+   ssl_engine_dh.c, while the comment in ssl_engine_kernel.c says:
+   "it is suggested that keys be changed daily or every 500
+    transactions, and more often if possible."