X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=blobdiff_plain;f=doc%2Fssl%2FSSL_CTX_set_tmp_dh_callback.pod;h=64c8b6527627d2f111676c9d46993b6a3770e734;hp=b754c16a86e66eaeab66df876000ffd760dd7c70;hb=1554d55318a7bb3347f4ccfadf78cca56e51ee79;hpb=1f302db3e70f50f9b5e0860581a18e117eafcf20 diff --git a/doc/ssl/SSL_CTX_set_tmp_dh_callback.pod b/doc/ssl/SSL_CTX_set_tmp_dh_callback.pod index b754c16a86..64c8b65276 100644 --- a/doc/ssl/SSL_CTX_set_tmp_dh_callback.pod +++ b/doc/ssl/SSL_CTX_set_tmp_dh_callback.pod @@ -83,9 +83,8 @@ which use safe primes and were generated verifiably pseudo-randomly. These files can be converted into C code using the B<-C> option of the L application. Generation of custom DH parameters during installation should still be preferred to stop an -attacker from specializing on a commonly used group. Files dh1024.pem -and dh512.pem contain old parameters that must not be used by -applications. +attacker from specializing on a commonly used group. File dh1024.pem +contains old parameters that must not be used by applications. An application may either directly specify the DH parameters or can supply the DH parameters via a callback function.