]> git.proxmox.com Git - pve-http-server.git/commit
Revert "tls: make dh to openssl 1.1 compatible"
authorThomas Lamprecht <t.lamprecht@proxmox.com>
Fri, 25 Oct 2019 15:34:27 +0000 (17:34 +0200)
committerFabian Grünbichler <f.gruenbichler@proxmox.com>
Mon, 28 Oct 2019 09:26:26 +0000 (10:26 +0100)
commitaa6e7a0d639d58172612b55d892535e098648c25
treef7e02a89d6d09a6669d7c546c6909e48e53b1a82
parentf5fe153b4850e5bf8f8c0a0c4093e7b437697da0
Revert "tls: make dh to openssl 1.1 compatible"

The libanyevent-perl version 7.140-3 included a fix for this.
It migrated to the then still testing (buster was not yet released)
on 07.04.2019, and so we can safely revert this workaround again
here.

Albeit this was fixed since Buster was officially released, still
bump the version dependency to libanyevent-perl in debian/control.

A future libanyevent-perl will use "ffdhe3072" for DH; another good
reason to revert this, to not keep hardcoded parameters with possible
(future) security implications here.

[0]: https://tracker.debian.org/news/1037514/libanyevent-perl-7140-3-migrated-to-testing/

This reverts commit ea574439f76bb3914b8b8c0be8e40ee826c95afc.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
PVE/APIServer/AnyEvent.pm
debian/control