13 Feb
2019
13 Feb
'19
1:30 p.m.
Am 12.02.2019 um 18:16 schrieb yugi:
Does perdition accept wildcards as certificate ?
I am trying to set a deploy with one and I am getting always the error
that was no possible to find the DH parameters.
Not finding the DH parameters should be completely independet from the
type of certificate (most server applications do not check the server
certificate anyway, because it is validated and trusted by the client,
which may have completely different rules).
For the DH parameters there are basically 3 options:
1. Generate DH parameters with OpenSSL, GnuTLS or other tools, put them
in a separate file and configure that file with *ssl_dh_params_file *option*
*
2. Generate DH parameters with OpenSSL, GnuTLS or other tools and put it
into your certificate file
3. Change *ssl_listen_ciphers* option to not include crypto algorithms
that depend on DH parameters.
Regards
Matthias