From: Jeff Trawick
Date: Sat, 12 Jul 2014 18:10:51 +0000 (+0000)
Subject: Sync version info in DH parameter doc with 2.4.x branch (r1610014).
X-Git-Tag: 2.5.0-alpha~3981
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=732d1dc4a7380fde9cdb64a0fa2f11c2c53464ab;p=apache
Sync version info in DH parameter doc with 2.4.x branch (r1610014).
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1610015 13f79535-47bb-0310-9956-ffa450edef68
---
diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml
index fd365ba489..52be8774e4 100644
--- a/docs/manual/mod/mod_ssl.xml
+++ b/docs/manual/mod/mod_ssl.xml
@@ -843,8 +843,10 @@ are applied independently of the authentication algorithm type.
DH parameter interoperability with primes > 1024 bit
-Beginning with version 2.5.0-dev, mod_ssl makes use of
-standardized DH parameters with prime lengths of 2048, 3072 and 4096, 6144 and 8192 bits
+Beginning with version 2.4.7, mod_ssl makes use of
+standardized DH parameters with prime lengths of 2048, 3072 and 4096 bits
+and with additional prime lengths of 6144 and 8192 bits beginning with
+version 2.4.10
(from RFC 3526), and hands
them out to clients based on the length of the certificate's RSA/DSA key.
With Java-based clients in particular (Java 7 or earlier), this may lead