We need to *warn* people about these changes in advance. And we need to have a visual indicator that some action is required here to replace the DH params then.
We cannot break things and expect people to find something in the log files.
Can we do that and automatically generate a 2k DH params for them? Would the clients notice that this has changed?
Best, -Michael
On Tue, 2018-06-19 at 13:58 +0200, ummeegge wrote:
Hi Michael, the connections won´t start for this systems and the logs should display an appropriate error, in that case they will need to recreate it which is possible over the WUI. After the update to Core 120 only a few people wrote about that problem possibly because mostly people do use already 2048 bit.
Erik
Am Dienstag, den 19.06.2018, 11:31 +0100 schrieb Michael Tremer:
Hello,
this patch is fine, but what do we do with systems that already have a key generated with that size?
-Michael
On Mon, 2018-06-18 at 19:16 +0200, Erik Kapfer wrote: