File

core.certmanager: Include ffdhe2048 from RFC 7919 as default DH param This removes one manual (yet undocumented) step that was supposed to be done to get a complete 'intermediate' configuration. This file can be found on the Internet by searching for "ffdhe2048" and can be verified by comparing the hexadecimal representation of p from the RFC with the output of `openssl asn1parse`. Given the preference and prevalence of ECDHE, it seems likely that few would have noticed this.

# https://editorconfig.org/

root = true

[*]
charset = utf-8
end_of_line = lf
indent_style = tab
insert_final_newline = true
trim_trailing_whitespace = true
max_line_length = 150

[CHANGES]
indent_size = 4
indent_style = space

[configure]
indent_size = 3
indent_style = space

[*.xml]
# xmllint --nsclean --encode UTF-8 --noent --format -
indent_size = 2
indent_style = space