firefox - how to validate dhparams in apache <=2.4.6 - Server Fault


how can validate i've setup apache 2.4.6 server custom 2048-bit (or 4096-bit) dhparams config?

following weakdh.org sysadmin guide, created own dhparams.pem file openssl dhparam -out dhparams.pem 2048. guide says add apache mod_ssl config sslopensslconfcmd dhparameters "{path dhparams.pem}", valid apache >= v2.4.7. i'm using centos 7, uses apache v2.4.6.

according this server fault question, solution in apache v2.4.6 append certificate file. did cat /etc/pki/dhparam/dhparam.pem >> /etc/letsencrypt/live/openbuildinginstitute.org/cert.pem (and cat /etc/pki/dhparam/dhparam.pem >> /etc/letsencrypt/live/openbuildinginstitute.org/fullchain.pem` && restarted apache.

but how verify client-side (my browser) config in effect?

this issue use let's encrypt, want make sure our 90-day cert renewals include step, , want able verify browser.

i tried downloading certificate firefox's "view certificate" -> "details" -> "export...", , confirmed "-----begin dh parameters-----" absent resulting file.

this superuser question provides openssl command output serverkeyexchange in hex, , can calculate bit size.

this helpful, i'd prefer command extract relevant data hex encoding & print base-10 bit size.


Comments

Popular posts from this blog

angular - Ionic slides - dynamically add slides before and after -

minify - Minimizing css files -

Add a dynamic header in angular 2 http provider -