637 

   638 # The pre-defined default finite field Diffie-Hellman ephemeral (DHE)

   639 # parameters for Transport Layer Security (SSL/TLS/DTLS) processing.

   640 #

   641 # In traditional SSL/TLS/DTLS connections where finite field DHE parameters

   642 # negotiation mechanism is not used, the server offers the client group

   643 # parameters, base generator g and prime modulus p, for DHE key exchange.

   644 # It is recommended to use dynamic group parameters.  This property defines

   645 # a mechanism that allows you to specify custom group parameters.

   646 #

   647 # The syntax of this property string is described as this Java BNF-style:

   648 #   DefaultDHEParameters:

   649 #       DefinedDHEParameters { , DefinedDHEParameters }

   650 #

   651 #   DefinedDHEParameters:

   652 #       "{" DHEPrimeModulus , DHEBaseGenerator "}"

   653 #

   654 #   DHEPrimeModulus:

   655 #       HexadecimalDigits

   656 #

   657 #   DHEBaseGenerator:

   658 #       HexadecimalDigits

   659 #

   660 #   HexadecimalDigits:

   661 #       HexadecimalDigit { HexadecimalDigit }

   662 #

   663 #   HexadecimalDigit: one of

   664 #       0 1 2 3 4 5 6 7 8 9 A B C D E F a b c d e f

   665 #

   666 # Whitespace characters are ignored.

   667 #

   668 # The "DefinedDHEParameters" defines the custom group parameters, prime

   669 # modulus p and base generator g, for a particular size of prime modulus p.

   670 # The "DHEPrimeModulus" defines the hexadecimal prime modulus p, and the

   671 # "DHEBaseGenerator" defines the hexadecimal base generator g of a group

   672 # parameter.  It is recommended to use safe primes for the custom group

   673 # parameters.

   674 #

   675 # If this property is not defined or the value is empty, the underlying JSSE

   676 # provider's default group parameter is used for each connection.

   677 #

   678 # If the property value does not follow the grammar, or a particular group

   679 # parameter is not valid, the connection will fall back and use the

   680 # underlying JSSE provider's default group parameter.

   681 #

   682 # Note: This property is currently used by OpenJDK's JSSE implementation. It

   683 # is not guaranteed to be examined and used by other implementations.

   684 #

   685 # Example:

   686 #   jdk.tls.server.defaultDHEParameters=

   687 #       { \

   688 #       FFFFFFFF FFFFFFFF C90FDAA2 2168C234 C4C6628B 80DC1CD1 \

   689 #       29024E08 8A67CC74 020BBEA6 3B139B22 514A0879 8E3404DD \

   690 #       EF9519B3 CD3A431B 302B0A6D F25F1437 4FE1356D 6D51C245 \

   691 #       E485B576 625E7EC6 F44C42E9 A637ED6B 0BFF5CB6 F406B7ED \

   692 #       EE386BFB 5A899FA5 AE9F2411 7C4B1FE6 49286651 ECE65381 \

   693 #       FFFFFFFF FFFFFFFF, 2}