KviSSL: OpenSSL3 already includes a set of "safe" primes and can handle DH automatically.
There are still warnings coming from the "fish" module, that is using a custom prime for DH.
I'm not sure if fish encryption is still relevant nowadays, but surely it's not secure anymore given it uses blowfish in EBC (or optionally CBC) mode. As long as it works, nice.
KviSSL: OpenSSL3 already includes a set of "safe" primes and can handle DH automatically.
There are still warnings coming from the "fish" module, that is using a custom prime for DH. I'm not sure if fish encryption is still relevant nowadays, but surely it's not secure anymore given it uses blowfish in EBC (or optionally CBC) mode. As long as it works, nice.