Browse Source

certs: Build 2048 bit DH params only for speed-up.

Signed-off-by: Maximilian Wilhelm <max@sdn.clinic>
Maximilian Wilhelm 4 years ago
parent
commit
0f9dd6259d
1 changed files with 1 additions and 1 deletions
  1. 1 1
      certs/init.sls

+ 1 - 1
certs/init.sls

@@ -16,7 +16,7 @@ update_ca_certificates:
 
 generate-dhparam:
   cmd.run:
-    - name: openssl dhparam -out /etc/ssl/dhparam.pem 4096
+    - name: openssl dhparam -out /etc/ssl/dhparam.pem 2048
     - creates: /etc/ssl/dhparam.pem
 
 # Install FFHO internal CA into Debian CA certificate mangling mechanism so