Make OpenSSL use less computing power, closes #87

http://security.stackexchange.com/questions/95178/diffie-hellman-parameters-still-calculating-after-24-hours suggests to add the `-dsaparam` to the OpenSSL commandline for unarbitrarily long running Diffie-Hellman parameters generation.
This commit is contained in:
almereyda
2017-01-06 21:15:06 +00:00
parent 5509178984
commit a096a6f72b
2 changed files with 2 additions and 2 deletions

View File

@@ -55,5 +55,5 @@ class Nginx(base.Installer):
system.add_user_to_group(user, group)
if not os.path.exists("{}/dhparam.pem".format(self.config_dir)):
cmd = "openssl dhparam -out dhparam.pem 4096"
cmd = "openssl dhparam -dsaparam -out dhparam.pem 4096"
utils.exec_cmd(cmd, cwd=self.config_dir)