Always use fixed DH parameters created with 'dhparam -C',

don't dynamically create them.  This allows using ssltest
for approximate performance comparisons:
   $ time ./ssltest -num 50 -tls1 -cert ../apps/server2.pem \
     [-no_dhe|-dhe1024dsa|-dhe1024]
(server2.pem contains a 1024 bit RSA key, the default has only
512 bits.) Note that these timings contain both the server's and
the client's computations, they are not a good indicator for
server workload in different configurations.

1 files changed, 1 insertions, 1 deletions

diff --git a/ms/test.bat b/ms/test.bat
index 3506a644f5..ef37beaa22 100755
--- a/ms/test.bat
+++ b/ms/test.bat
@@ -136,7 +136,7 @@ ssltest -bio_pair -ssl2
 if errorlevel 1 goto done

 

 echo test sslv2/sslv3 with 1024 bit DHE via BIO pair

-ssltest -bio_pair -dhe1024 -v

+ssltest -bio_pair -dhe1024dsa -v

 if errorlevel 1 goto done

 

 echo test sslv2 with server authentication via BIO pair