[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#11267: 24.0.95; gnutls.c: [0] (Emacs) fatal error: The Diffie-Hellma
|
From: |
Nikos Mavrogiannopoulos |
|
Subject: |
bug#11267: 24.0.95; gnutls.c: [0] (Emacs) fatal error: The Diffie-Hellman prime sent by the server is not acceptable (not long enough). |
|
Date: |
Mon, 10 Feb 2014 09:28:09 +0100 |
On Mon, Feb 10, 2014 at 4:06 AM, Roland Winkler <winkler@gnu.org> wrote:
> On Sun Feb 9 2014 Ted Zlatanov wrote:
>> Roland, if you are satisfied with the direction taken in those
>> bugs, we can probably close this one.
> I am still a bit confused concerning a "reasonable minimal value"
> for gnutls-min-prime-bits. Is 256 a value that I can feel
> comfortable about?
No. 256-bit DH is a bit harder than rot13 as encryption. I'd suggest
not to set the minimum acceptable size and let gnutls decide instead.
For broken servers that use very small sizes, you could disable the
DHE ciphersuites as described in the previous mails.
regards,
Nikos