DH group cipher suites getting rejected

Salz, Rich rsalz at akamai.com
Wed Sep 18 12:30:44 UTC 2019

  *   However if I try ECDHE, it works fine. Is DHE only cipher suites less common now ?
  *   I believe its responsibility of server to generate DHparam of large enough size.

Yes, DHE has dropped because it is hard to get right, and it takes more CPU cycles than ECDHE.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20190918/101587fd/attachment.html>

More information about the openssl-users mailing list