[tahoe-lafs-trac-stream] [Tahoe-LAFS] #2385: node web server should use DHE/ECDHE suites automatically

[Tahoe-LAFS]

#2385: node web server should use DHE/ECDHE suites automatically
-------------------------------+---------------------------
 Reporter:  j3i                |          Owner:
     Type:  enhancement        |         Status:  new
 Priority:  normal             |      Milestone:  undecided
Component:  code-frontend-web  |        Version:  1.10.0
 Keywords:                     |  Launchpad Bug:
-------------------------------+---------------------------
 Right now you have to manually generate Diffie-Hellman parameters and
 define them in the config if you want to use a node's web server via TLS
 and not be restricted to plain RSA authentication like this:

 web.port =
 ssl:443:privateKey=key.pem:certKey=cert.pem:dhParameters=params.pem

 The DH parameters should be provided automatically and cipher suites with
 PFS should work out of the box.

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2385>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage