If I've generated new 4096-bit DH parameters to get that green A+ on SSL labs, do I need to regenerate now?
i.e. I've run openssl dhparam -out dhparam.pem 4096 on a potentially vulnerable version of OpenSSL.
OpenSSL Key Recovery Attack on DH small subgroups (CVE-2016-0701)
21–22 of 22 posts
Re: OpenSSL Key Recovery Attack on DH small subgroups (CVE-2016-0701)
#22If I've generated new 4096-bit DH parameters to get that green A+ on SSL labs, do I need to regenerate now? i.e. I've run openssl dhparam -out dhparam.pem 4096 on a potentially vulnerable version of OpenSSL.
No.