Make OpenSSL use less computing power, closes #87

http://security.stackexchange.com/questions/95178/diffie-hellman-parameters-still-calculating-after-24-hours suggests to add the `-dsaparam` to the OpenSSL commandline for unarbitrarily long running Diffie-Hellman parameters generation.
This commit is contained in:
almereyda
2017-01-06 21:15:06 +00:00
parent 5509178984
commit a096a6f72b
2 changed files with 2 additions and 2 deletions

View File

@@ -85,5 +85,5 @@ class Postfix(base.Installer):
# Generate EDH parameters
if not os.path.exists("{}/dh2048.pem".format(self.config_dir)):
cmd = "openssl dhparam -out dh2048.pem 2048"
cmd = "openssl dhparam -dsaparam -out dh2048.pem 2048"
utils.exec_cmd(cmd, cwd=self.config_dir)