From 01fac52e231ab633f7384b4a1ca6786e2dbc7ab6 Mon Sep 17 00:00:00 2001 From: Bram Prieshof Date: Thu, 8 Oct 2020 13:37:36 +0200 Subject: [PATCH] Set dsaparam for quicker generation of dhparam --- preconf.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/preconf.sh b/preconf.sh index ce78ee7..1272c0a 100644 --- a/preconf.sh +++ b/preconf.sh @@ -13,7 +13,8 @@ curl --retry 7 --retry-delay 5 -s "$mrepo"/raw/branch/"$mbranch"/conf/acme.sh.en echo '. "/opt/acmesh/acme.sh.env"' >> ~/.bashrc echo '42 0 * * * root "/opt/acmesh/acme.sh" --cron --home "/opt/acmesh/" --config-home "/etc/acmesh/data" > /dev/null' >> /etc/crontab -openssl dhparam -out /etc/acmesh/certs/ssl-dhparams.pem 4096 +openssl dhparam -dsaparam -out /etc/acmesh/certs/ssl-dhparams.pem 4096 +#openssl dhparam -out /etc/acmesh/certs/ssl-dhparams.pem 4096 #uses "strong" primes instead of DSA #openssl dhparam -out /etc/acmesh/certs/ssl-dhparams.pem 2048 #use for quick generation, only for testing /opt/acmesh/acme.sh --home "/opt/acmesh/" --config-home "/etc/acmesh/data" --upgrade