[tor-bugs] #12217 [Tor Sysadmin Team]: Fix website weak key exchange

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Oct 22 15:45:57 UTC 2014


#12217: Fix website weak key exchange
-----------------------------------+--------------------
     Reporter:  UserUnknown        |      Owner:
         Type:  defect             |     Status:  closed
     Priority:  normal             |  Milestone:
    Component:  Tor Sysadmin Team  |    Version:
   Resolution:  fixed              |   Keywords:
Actual Points:                     |  Parent ID:
       Points:                     |
-----------------------------------+--------------------

Comment (by tom):

 I can confirm it is still an issue (ssllabs indicates 1024 bit groups
 still in use, it's in the ciphersuite table), but based off
 http://blog.ivanristic.com/2013/08/increasing-dhe-strength-on-apache.html
 it appears upgrading the group would require patching and compiling 2.2 or
 upgrading to 2.4.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12217#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list