diff options
Diffstat (limited to 'doc')
-rw-r--r-- | doc/ssl/SSL_CTX_set_tmp_dh_callback.pod | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/doc/ssl/SSL_CTX_set_tmp_dh_callback.pod b/doc/ssl/SSL_CTX_set_tmp_dh_callback.pod index b754c16a86..64c8b65276 100644 --- a/doc/ssl/SSL_CTX_set_tmp_dh_callback.pod +++ b/doc/ssl/SSL_CTX_set_tmp_dh_callback.pod @@ -83,9 +83,8 @@ which use safe primes and were generated verifiably pseudo-randomly. These files can be converted into C code using the B<-C> option of the L<dhparam(1)|dhparam(1)> application. Generation of custom DH parameters during installation should still be preferred to stop an -attacker from specializing on a commonly used group. Files dh1024.pem -and dh512.pem contain old parameters that must not be used by -applications. +attacker from specializing on a commonly used group. File dh1024.pem +contains old parameters that must not be used by applications. An application may either directly specify the DH parameters or can supply the DH parameters via a callback function. |