Re: Re: openSUSE 13.1 and weakdh.org
Tobias Hennerich <[email protected]> Tue, 24 Nov 2015 15:09:02 +0100
| Newsgroups | gmane.linux.suse.security |
|---|---|
| Message-ID | <[email protected]> |
Hi Marcus, thank you for your mail. So the comment #21 from "swamp workflow management" in ticket 931723 is just wrong (at least concerning 13.1) ? Viele Grüße Tobias -- T+T Hennerich GmbH / Zettachring 12a / 70567 Stuttgart Fon:+49(711)720714-0 Fax:+49(711)720714-44 Vanity:+49(700)HENNERICH Geschäftsführer: Dipl. Inf. Tobias Hennerich + Dipl. Inf. Timo Hennerich http://www.hennerich.de/ Amtsgericht Stuttgart, HRB 281482 Am 24.11.2015 um 15:00 schrieb Marcus Meissner: > Hi, > > I have read it. The patch is just hard to backport sadly. > > Ciao, Marcus > On Tue, Nov 24, 2015 at 02:43:36PM +0100, Tobias Hennerich wrote: >> Hi, >> >> after one week no response to my mail at all :-( >> >> Is the answer too obvious or is the topic too exotic? Or is >> opensuse-security just the wrong mailing list? >> >> Kind regards Tobias >> >> -- >> T+T Hennerich GmbH / Zettachring 12a / 70567 Stuttgart >> Fon:+49(711)720714-0 Fax:+49(711)720714-44 Vanity:+49(700)HENNERICH >> Geschäftsführer: Dipl. Inf. Tobias Hennerich + Dipl. Inf. Timo Hennerich >> http://www.hennerich.de/ Amtsgericht Stuttgart, HRB 281482 >> >> Am 17.11.2015 um 17:32 schrieb Tobias Hennerich: >>> Hi, >>> >>> we have several webservers using apache and openSUSE 13.1. >>> >>> https://www.ssllabs.com/ssltest/ rates these systems with an >>> overall rating "B", because "/This server supports weak >>> Diffie-Hellman (DH) key exchange parameters./". >>> >>> The recommendations on https://weakdh.org/sysadmin.html can not be >>> used because the apache directive SSLOpenSSLConfCmd needs apache >>> 2.4.8 and openSUSE 13.1 is using 2.4.6. The other suggestion to >>> append the DHparams to the end of the certificate file does also >>> not work, because you need apache 2.4.7 for that. >>> >>> I found ticket https://bugzilla.suse.com/show_bug.cgi?id=931723 >> >from May 2015 in Status "NEW". There is a comment from "/Swamp >>> Workflow Management ////2015-10-06 07:09:35 UTC/", that there >>> should be a fix for openSUSE 13.1 with apache2-2.4.6-6.50.1, but a >>> "rpm -q --changelog apache2" does not mention this problem and the >>> various patches of the src-rpm do not match, too. >>> >>> Any suggestions? >>> >>> Best regards Tobias >>> >> -- >> To unsubscribe, e-mail: [email protected] >> To contact the owner, e-mail: [email protected] >> -- To unsubscribe, e-mail: [email protected] To contact the owner, e-mail: [email protected]