Am 12.02.2019 um 18:16 schrieb yugi:
Does perdition accept wildcards as certificate ?
I am trying to set a deploy with one and I am getting always the error that was no possible to find the DH parameters.

Not finding the DH parameters should be completely independet from the type of certificate (most server applications do not check the server certificate anyway, because it is validated and trusted by the client, which may have completely different rules).

For the DH parameters there are basically 3 options:

1. Generate DH parameters with OpenSSL, GnuTLS or other tools, put them in a separate file and configure that file with ssl_dh_params_file option

2. Generate DH parameters with OpenSSL, GnuTLS or other tools and put it into your certificate file

3. Change ssl_listen_ciphers option to not include crypto algorithms that depend on DH parameters.


Regards

Matthias