Re: Subject: SSL_connect returned=1 errno=0 state=error: dh key too small

To: Marcelo Lauxen <marcelolauxen16@xxxxxxxxx>
Subject: Re: Subject: SSL_connect returned=1 errno=0 state=error: dh key too small
From: "Salz, Rich via openssl-users" <openssl-users@xxxxxxxxxxx>
Date: Thu, 29 Aug 2019 17:19:34 +0000
Accept-language: en-US
Cc: "openssl-users@xxxxxxxxxxx" <openssl-users@xxxxxxxxxxx>
In-reply-to: <CANKisB2qSopMULROtEWkKHbgyLMMKtvv+cduiUD+YAVpbCOZgA@mail.gmail.com>
References: <CANKisB2Gbc5Wh2hvEdF-RzeNy-tbPTtD5g28545q8u4D8bUseg@mail.gmail.com> <B9F45544-DE24-42F8-B4C9-FCEF096FC697@akamai.com> <CANKisB2qSopMULROtEWkKHbgyLMMKtvv+cduiUD+YAVpbCOZgA@mail.gmail.com>
Reply-to: "Salz, Rich" <rsalz@xxxxxxxxxx>
User-agent: Microsoft-MacOutlook/10.1c.0.190812

I've another question, based on your suggestion Salz Rich, this config @SECLEVEL can be set per host/domain, or is it impossible?

It totally depends on which webserver you are running and what it’s configuration allows. I’m not able to answer webserver config questions BTW.

References:
- Subject: SSL_connect returned=1 errno=0 state=error: dh key too small
  - From: Marcelo Lauxen
- Re: Subject: SSL_connect returned=1 errno=0 state=error: dh key too small
  - From: Salz, Rich
- Re: Subject: SSL_connect returned=1 errno=0 state=error: dh key too small
  - From: Marcelo Lauxen