tls: make server not use DHE in less than 1024bits
authorShigeki Ohtsu <ohtsu@iij.ad.jp>
Wed, 20 May 2015 05:20:26 +0000 (14:20 +0900)
committerShigeki Ohtsu <ohtsu@iij.ad.jp>
Wed, 20 May 2015 15:02:44 +0000 (00:02 +0900)
commit9b35be58100237365c24ab394d3dc6462f9675e6
treeac88c03df8081d75f6251231e329090c807ed581
parentf0a8bc3f8411c469a7d80244b843446dfd759a36
tls: make server not use DHE in less than 1024bits

DHE key lengths less than 1024bits is already weaken as pointed out in
https://weakdh.org/ . 1024bits will not be safe in near future. We
will extend this up to 2048bits somedays later.

PR-URL: https://github.com/nodejs/io.js/pull/1739
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Fedor Indutny <fedor@indutny.com>
doc/api/tls.markdown
src/node_crypto.cc
test/parallel/test-tls-dhe.js