3 ms·

This was _the_ thing I was looking forward to most in the release of Debian 7. A sufficiently recent version of OpenSSL to do ECDHE. Plain DHE is _killing_ our

• newman314 13y ago
  I got this included into Ubuntu 12.04 and later. You might want to consider running Ubuntu just as a termination host if you are really desperate.
• apendleton 13y ago
  We just went through some similar stuff, having to ditch Amazon Linux for our SSL termination machine because Red Hat strips out all elliptic-curve crypto. It might also be worth investigating whether or not the Debian 7 OpenSSL build includes the optimized 64-bit ECDHE implementation contributed by Google, which wasn't enabled in Ubuntu's build until last month.
  • newman314 13y ago
    Yer welcome =) I pestered peeps till they turned that flag on. As you said, it's now on for Ubuntu.
    • apendleton 13y ago
      Belated thanks!