pfsense/pfsense — pull request #1390 by fabrizziop (2014-12-16 17:31:39+00:00)
Title: Use 4096-bit DHE on WebCFG & Alter cipher suite

1024-bit DH parameters are the weakest link there. I've used the already-existing 4096-bit DH parameters from /etc/dh-parameters.4096

In the cipher suite, PFS ciphers are above non-PFS ones independent of key size (128 bits are enough for now). AES was placed above Camellia, because AES has been more analyzed.