From 732d1dc4a7380fde9cdb64a0fa2f11c2c53464ab Mon Sep 17 00:00:00 2001 From: Jeff Trawick Date: Sat, 12 Jul 2014 18:10:51 +0000 Subject: [PATCH] Sync version info in DH parameter doc with 2.4.x branch (r1610014). git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1610015 13f79535-47bb-0310-9956-ffa450edef68 --- docs/manual/mod/mod_ssl.xml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml index fd365ba489..52be8774e4 100644 --- a/docs/manual/mod/mod_ssl.xml +++ b/docs/manual/mod/mod_ssl.xml @@ -843,8 +843,10 @@ are applied independently of the authentication algorithm type.

DH parameter interoperability with primes > 1024 bit

-Beginning with version 2.5.0-dev, mod_ssl makes use of -standardized DH parameters with prime lengths of 2048, 3072 and 4096, 6144 and 8192 bits +Beginning with version 2.4.7, mod_ssl makes use of +standardized DH parameters with prime lengths of 2048, 3072 and 4096 bits +and with additional prime lengths of 6144 and 8192 bits beginning with +version 2.4.10 (from RFC 3526), and hands them out to clients based on the length of the certificate's RSA/DSA key. With Java-based clients in particular (Java 7 or earlier), this may lead -- 2.50.1