DHPARAMS 4096 to allow for IE11/Win7 to work instead of Page Cant Be Displayed (#369)

ssllabs.com shows a standard IE11/Win7 setup will not work. For companies that do not allow alternative popular Browsers this can be a non go for internal company deployment. Lowering the DH to 4096 may alleviate this issue. Below is the ssllabs.com lab results:

IE 11 / Win 7  R		Client does not support DH parameters > 4096 bits
RSA 4096 (SHA256)   |  TLS 1.2  |  TLS_DHE_RSA_WITH_AES_128_GCM_SHA256  |  DH 8192
This commit is contained in:
gabasync 2017-09-21 15:29:50 -04:00 коммит произвёл Daniel Hansson
Родитель 0ae1be8731
Коммит 5076852d06
1 изменённых файлов: 1 добавлений и 1 удалений

Просмотреть файл

@ -248,7 +248,7 @@ if [ -d "$CERTFILES" ]
# Generate DHparams chifer
if [ ! -f "$DHPARAMS" ]
then
openssl dhparam -dsaparam -out "$DHPARAMS" 8192
openssl dhparam -dsaparam -out "$DHPARAMS" 4096
fi
# Activate new config
check_command bash "$SCRIPTS/test-new-config.sh" "$domain.conf"