Thank you guys for the answers! I've another question, based on your suggestion Salz Rich, this config @SECLEVEL can be set per host/domain, or is it impossible?
On Thu, Aug 29, 2019 at 12:38 PM Salz, Rich <rs...@akamai.com> wrote: > > - We haven't control of the server who are using DH key size of 1048 > bits. > > In order to work with this kind of server (terribly poor security > characteristics), you need to add “@SECLEVEL=0” to your OpenSSL > configuration. > > >
