Mobile app version of vmapp.org
Login or Join
Hamaas447

: SSL Labs Key exchange < 100%, why? How do I make it? I am in progress of trying to get maximum (or almost maximum) score on SSL Labs my site: I currently don't understand why it does

@Hamaas447

Posted in: #Https #SecurityCertificate

I am in progress of trying to get maximum (or almost maximum) score on SSL Labs my site:

I currently don't understand why it does not give me full Key exchange score.

Now, it looks like this:



In spite of, I have generated 4096 DHParameters file, and tried many other things, like buying new certificate of 4096 size.

So, my question for you will be:

SSL Labs Key exchange is less than 100%, why? And how do I make it full?

OS: GNU/Linux Debian 9.2 with Apache 2.4.

10.01% popularity Vote Up Vote Down


Login to follow query

More posts by @Hamaas447

1 Comments

Sorted by latest first Latest Oldest Best

 

@Phylliss660

In the following file:

/etc/apache2/mods-enabled/ssl.conf


It was necessary to append these lines to ensure the highest grade of key exchange:

SSLOpenSSLConfCmd ECDHParameters Automatic
SSLOpenSSLConfCmd Curves secp521r1:secp384r1

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme