Thank you guys for the answers!
I've another question, based on your suggestion Salz Rich, this config @SECLEVEL can be set per host/domain, or is it impossible?
On Thu, Aug 29, 2019 at 12:38 PM Salz, Rich <rsalz@xxxxxxxxxx> wrote:
- We haven't control of the server who are using DH key size of 1048 bits.
In order to work with this kind of server (terribly poor security characteristics), you need to add “@SECLEVEL=0” to your OpenSSL configuration.
