title: How to enforce DH key size in the OpenSSL client?
body: <p>In our Application, we use OpenSSL for secure connections and we use DH for key exchange.  With the recent OpenSSL versions, minimum key length that can be used is 768 and 1024 is recommended. 
  Our application is peer-peer application and to comply with this requirement, all our application instances need to be updated to start using 1024 DH keys. As on today, our application uses 512 key by default. They can be configured via configuration file to specify 102/2048/4096 lengths but this requires manual change on all systems. </p>
  
  <p>To my understanding, server side will decides DH key length always. So, we will not be able to update the OpenSSL version on client side without updating server side. </p>
  
  <p>Is there any way to enforce the minimum DH key length from client side so that server will generate DH key with minimum length specified by client?</p>