Commits on Mar 8, 2023

1. tls: support automatic DHE …

   Node.js has so far only supported user-defined DHE parameters and even
   recommended generating custom parameters. This change lets users set the
   dhparam option to 'auto' instead, in which case DHE parameters of
   sufficient strength are selected automatically (from a small set of
   well-known parameters). This has been recommended by OpenSSL for quite a
   while, and it makes it much easier for Node.js TLS servers to properly
   support DHE-based perfect forward secrecy.
   
   This also updates the documentation to prioritize ECDHE over DHE, mostly
   because the former tends to be more efficient and is enabled by default.

   

   tniessen committed Mar 8, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for ee0f667
   • Browse repository at this point

   Copy the full SHA

   ee0f667 View commit details

   Browse the repository at this point in the history