Hi Jean-frederic, just to make sure that I am understanding the current status properly: The sibling Bug#1251796 filed against Jboss Web being fixed and verified means that the fix is the same for EAP, right? And the fix consists in upgrading of openssl to 1.0.2h (plus some additional configuration allowed by the upgrade).
Comment 5Jean-frederic Clere
2016-08-09 10:56:52 UTC
correct rhbz 1251796 + some additional configuration/documented allowed by the upgrade are the fix.
Comment 8Michal Karm Babacek
2016-09-30 11:37:00 UTC
EAP will shil EWS 2.1.1 with OpenSSL 1.0.2.
httpd 2.2.26 cannot add dhparams as a special directive, but it is possible to ad them at the end of certificate file.
VERIFIED