Re: Re: openSUSE 13.1 and weakdh.org

HI,

I revived my test patch, if you would like to test it.

This is a ssl backport from 2.4.10 to 2.4.6.

Alternatively we could also remove the 512 and 1024 bit group
and add a fixed 2048 bit group, which would be more minimal.

Ciao, Marcus
On Tue, Dec 15, 2015 at 02:13:32PM +0100, Tobias Hennerich wrote:
> Hi all,
> 
> three weeks later, still no news to this topic. Is there any hope
> left, that this problem will be fixed sometime in the future?
> 
> Can someone at least update comment 21 of
> https://bugzilla.suse.com/show_bug.cgi?id=931723 referring to 13.1 ?
> This is just plain wrong...
> 
> Regards / Viele Grüße         Tobias Hennerich
> 
> -- 
> T+T Hennerich GmbH     /      Zettachring 12a      /     70567 Stuttgart
> Fon:+49(711)720714-0   Fax:+49(711)720714-44    Vanity:+49(700)HENNERICH
> Geschäftsführer: Dipl. Inf. Tobias Hennerich + Dipl. Inf. Timo Hennerich
> http://www.hennerich.de/               Amtsgericht Stuttgart, HRB 281482
> 
> Am 24.11.2015 um 15:08 schrieb Sebastian Krahmer:
> >Hi
> >
> >Thats strange indeed. According to the BZ track, this problem
> >should have been addressed. Investigating why this is apparently not
> >the case with the built rpms...
> >
> >regards
> >Sebastian
> >
> >On Tue, Nov 24, 2015 at 02:43:36PM +0100, Tobias Hennerich wrote:
> >>Hi,
> >>
> >>after one week no response to my mail at all :-(
> >>
> >>Is the answer too obvious or is the topic too exotic? Or is
> >>opensuse-security just the wrong mailing list?
> >>
> >>Kind regards    Tobias
> >>
> >>-- 
> >>T+T Hennerich GmbH     /      Zettachring 12a      /     70567 Stuttgart
> >>Fon:+49(711)720714-0   Fax:+49(711)720714-44    Vanity:+49(700)HENNERICH
> >>Geschäftsführer: Dipl. Inf. Tobias Hennerich + Dipl. Inf. Timo Hennerich
> >>http://www.hennerich.de/               Amtsgericht Stuttgart, HRB 281482
> >>
> >>Am 17.11.2015 um 17:32 schrieb Tobias Hennerich:
> >>>Hi,
> >>>
> >>>we have several webservers using apache and openSUSE 13.1.
> >>>
> >>>https://www.ssllabs.com/ssltest/ rates these systems with an
> >>>overall rating "B", because "/This server supports weak
> >>>Diffie-Hellman (DH) key exchange parameters./".
> >>>
> >>>The recommendations on https://weakdh.org/sysadmin.html can not be
> >>>used because the apache directive SSLOpenSSLConfCmd needs apache
> >>>2.4.8 and openSUSE 13.1 is using 2.4.6. The other suggestion to
> >>>append the DHparams to the end of the certificate file does also
> >>>not work, because you need apache 2.4.7 for that.
> >>>
> >>>I found ticket https://bugzilla.suse.com/show_bug.cgi?id=931723
> >>>from May 2015 in Status "NEW". There is a comment from "/Swamp
> >>>Workflow Management ////2015-10-06 07:09:35 UTC/", that there
> >>>should be a fix for openSUSE 13.1 with apache2-2.4.6-6.50.1, but a
> >>>"rpm -q --changelog apache2" does not mention this problem and the
> >>>various patches of the src-rpm do not match, too.
> >>>
> >>>Any suggestions?
> >>>
> >>>Best regards       Tobias
> >>>
> >>-- 
> >>To unsubscribe, e-mail: [email protected]
> >>To contact the owner, e-mail: [email protected]
> 
> -- 
> To unsubscribe, e-mail: [email protected]
> To contact the owner, e-mail: [email protected]
> 

-- 
Marcus Meissner,SUSE LINUX GmbH; Maxfeldstrasse 5; D-90409 Nuernberg; Zi. 3.1-33,+49-911-740 53-432,,serv=loki,mail=wotan,type=real <[email protected]>
-- 
To unsubscribe, e-mail: [email protected]
To contact the owner, e-mail: [email protected]