diff --git a/preconf.sh b/preconf.sh
index ce78ee7..1272c0a 100644
--- a/preconf.sh
+++ b/preconf.sh
@@ -13,7 +13,8 @@ curl --retry 7 --retry-delay 5 -s "$mrepo"/raw/branch/"$mbranch"/conf/acme.sh.en
 echo '. "/opt/acmesh/acme.sh.env"' >> ~/.bashrc
 echo '42 0     * * * root "/opt/acmesh/acme.sh" --cron --home "/opt/acmesh/" --config-home "/etc/acmesh/data" > /dev/null' >> /etc/crontab
 
-openssl dhparam -out /etc/acmesh/certs/ssl-dhparams.pem 4096
+openssl dhparam -dsaparam -out /etc/acmesh/certs/ssl-dhparams.pem 4096
+#openssl dhparam -out /etc/acmesh/certs/ssl-dhparams.pem 4096 #uses "strong" primes instead of DSA
 #openssl dhparam -out /etc/acmesh/certs/ssl-dhparams.pem 2048 #use for quick generation, only for testing
 
 /opt/acmesh/acme.sh --home "/opt/acmesh/" --config-home "/etc/acmesh/data" --upgrade