From: Jeff Trawick Date: Sat, 12 Jul 2014 18:10:51 +0000 (+0000) Subject: Sync version info in DH parameter doc with 2.4.x branch (r1610014). X-Git-Tag: 2.5.0-alpha~3981 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=732d1dc4a7380fde9cdb64a0fa2f11c2c53464ab;p=apache Sync version info in DH parameter doc with 2.4.x branch (r1610014). git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1610015 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml index fd365ba489..52be8774e4 100644 --- a/docs/manual/mod/mod_ssl.xml +++ b/docs/manual/mod/mod_ssl.xml @@ -843,8 +843,10 @@ are applied independently of the authentication algorithm type.

DH parameter interoperability with primes > 1024 bit

-Beginning with version 2.5.0-dev, mod_ssl makes use of -standardized DH parameters with prime lengths of 2048, 3072 and 4096, 6144 and 8192 bits +Beginning with version 2.4.7, mod_ssl makes use of +standardized DH parameters with prime lengths of 2048, 3072 and 4096 bits +and with additional prime lengths of 6144 and 8192 bits beginning with +version 2.4.10 (from RFC 3526), and hands them out to clients based on the length of the certificate's RSA/DSA key. With Java-based clients in particular (Java 7 or earlier), this may lead