Re: [PATCH] Re: Logjam mitigation for Wheezy?
Stefan Fritsch <sf <at> sfritsch.de> writes:
> And custom DH groups are not that easy to handle in an automated way.
Right. I’m currently suggesting each “site” to generate one and
roll that out for the whole “site” (e.g. company, project).
> For example on a cubietruck (Cortex A7), generation of a 2048 bit
> group takes about one hour.
Huh, fun. It took about 40 minutes both on my desktop (Debian sid/x32,
AMD Phenom II X4 965 @ 3.4 GHz) and home server (MirBSD/i386, Intel
Pentium-MMX @ 233 MHz).
> Upstream jumped through quite a few hoops to make the patch work with
> openssl 0.9.8. We don't need that for wheezy (which has 1.0.1e), but
> it may come handy for squeeze when someone wants to do the backport.
Mh. Still, “something like this” should be included in wheezy itself RSN.
bye,
//mirabilos
Reply to: