firefox - how to validate dhparams in apache <=2.4.6 - Server Fault
how can validate i've setup apache 2.4.6 server custom 2048-bit (or 4096-bit) dhparams config?
following weakdh.org sysadmin guide, created own dhparams.pem
file openssl dhparam -out dhparams.pem 2048
. guide says add apache mod_ssl config sslopensslconfcmd dhparameters "{path dhparams.pem}"
, valid apache >= v2.4.7. i'm using centos 7, uses apache v2.4.6.
according this server fault question, solution in apache v2.4.6 append certificate file. did cat /etc/pki/dhparam/dhparam.pem >> /etc/letsencrypt/live/openbuildinginstitute.org/cert.pem
(and cat /etc/pki/dhparam/dhparam.pem >> /etc/letsencrypt/live/openbuildinginstitute.org/fullchain.pem` && restarted apache.
but how verify client-side (my browser) config in effect?
this issue use let's encrypt, want make sure our 90-day cert renewals include step, , want able verify browser.
i tried downloading certificate firefox's "view certificate" -> "details" -> "export...", , confirmed "-----begin dh parameters-----" absent resulting file.
this superuser question provides openssl
command output serverkeyexchange in hex, , can calculate bit size.
this helpful, i'd prefer command extract relevant data hex encoding & print base-10 bit size.
Comments
Post a Comment