diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2012-02-09 15:42:10 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2012-02-09 15:42:10 +0000 |
| commit | f4e1169341ad1217e670387db5b0c12d680f95f4 (patch) | |
| tree | 331dbb3b9585c36a3f3c477bbfea9992c1bf5ea7 /demos/certs | |
| parent | febec8ff238bf4e9fe9f18922b221c4c9a17e145 (diff) | |
Modify client hello version when renegotiating to enhance interop with
some servers.
Diffstat (limited to 'demos/certs')
| -rw-r--r-- | demos/certs/mkcerts.sh | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/demos/certs/mkcerts.sh b/demos/certs/mkcerts.sh index 0d55e8f846..2cf39482c7 100644 --- a/demos/certs/mkcerts.sh +++ b/demos/certs/mkcerts.sh @@ -30,7 +30,10 @@ $OPENSSL x509 -req -in creq.pem -CA intca.pem -CAkey intkey.pem -days 3600 \ # First DH parameters -[ -f dhp.pem ] || $OPENSSL genpkey -genparam -algorithm DH -pkeyopt dh_paramgen_prime_len:1024 -out dhp.pem +$OPENSSL genpkey -genparam -algorithm DH -pkeyopt dh_paramgen_prime_len:1024 -out dhp.pem + +# Uncomment out this line for X9.42 DH parameters instead +$OPENSSL genpkey -genparam -algorithm DH -out dhp.pem -pkeyopt dh_rfc5114:2 # Now a DH private key $OPENSSL genpkey -paramfile dhp.pem -out dhskey.pem |