[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Perfect Forward Secrecy

To: Dieter KlÃnter <dieter@dkluenter.de>, openldap-technical@openldap.org
Subject: Re: Perfect Forward Secrecy
From: Howard Chu <hyc@symas.com>
Date: Fri, 06 Sep 2013 13:06:57 -0700
In-reply-to: <20130906190606.19563ea6@pink.avci.de>
References: <20130906190606.19563ea6@pink.avci.de>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:25.0) Gecko/20100101 Firefox/25.0 SeaMonkey/2.22a1

Dieter KlÃnter wrote:

Hi,
I wonder whether openldap, if compiled with openssl-1.x, will support
PFS. http://en.wikipedia.org/wiki/Perfect_forward_secrecy
This issue has been discussed on several mailinglists recently.


It already does, but you have to use the right cipher suites.

Also see ITS #7595 http://www.openldap.org/its/index.cgi/Incoming?id=7595

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/

Follow-Ups:
- Re: Perfect Forward Secrecy
  - From: Michael StrÃder <michael@stroeder.com>
- Re: Perfect Forward Secrecy
  - From: Michael StrÃder <michael@stroeder.com>

References:
- Perfect Forward Secrecy
  - From: Dieter KlÃnter <dieter@dkluenter.de>

Prev by Date: Problem pwdChangedTime
Next by Date: Re: Perfect Forward Secrecy
Index(es):
- Chronological
- Thread