[gnutls-help] too few bits from gnutls_dh_params_generate2() ?

[Nikos Mavrogiannopoulos]

On Tue, Nov 11, 2014 at 7:58 AM, Pierre Ossman <ossman at cendio.se> wrote:
> It was generated like this:
>
>   if (gnutls_dh_params_generate2(dh_params, DH_BITS) != GNUTLS_E_SUCCESS)
>     throw AuthFailureException("gnutls_dh_params_generate2 failed");

A question that arises, is why do you generate those parameters
anyway? Why not ship some static parameters (via certtool
--get-dh-params).

>> One option would be to upgrade to 3.3.x.
>>
> But that is still not considered a stable series, right?

It is the current stable.

regards,
Nikos