Hi!
This last patch is just a suggestion on how an apache configuration based on the Mozilla suggestion would look like.
It includes a 4096-bit DH parameter that is used instead of the one defined in RFC 5144. Generating the DH parameter has been the suggested approach by the weakdh-team. Of course, as already discussed, this would be the standard parameter for IPFire, then, similar as the already chosen EC curve and similar to the standard parameters defined in RFC 5144.
Best regards, Wolfgang