From 7f2f3a67d293997cbc95f3ec709967f277a2e04e Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Sun, 24 May 2015 10:47:21 +0300 Subject: [PATCH] Increase DH key size in the hostapd.conf example OpenSSL is moving to use 2048-bit DH key size as the default with dhparam. Increase the value in the hostapd.conf to match that to reduce likelihood of ending up using a shorter key. Signed-off-by: Jouni Malinen --- hostapd/hostapd.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hostapd/hostapd.conf b/hostapd/hostapd.conf index 5c6b28d01..390c75361 100644 --- a/hostapd/hostapd.conf +++ b/hostapd/hostapd.conf @@ -790,7 +790,7 @@ eap_server=0 # is in DSA parameters format, it will be automatically converted into DH # params. This parameter is required if anonymous EAP-FAST is used. # You can generate DH parameters file with OpenSSL, e.g., -# "openssl dhparam -out /etc/hostapd.dh.pem 1024" +# "openssl dhparam -out /etc/hostapd.dh.pem 2048" #dh_file=/etc/hostapd.dh.pem # OpenSSL cipher string