install/nginx
0
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

install_nginx.sh: generate DH parameters with option '-dsaparam' - no security risk but even faster.

Browse Source
This commit is contained in:
Christoph 2020-03-24 17:32:19 +01:00
parent dbef55c3c6
commit d9bcaa6c7a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
install_nginx.sh
View File

@ -230,7 +230,7 @@ else
_failed=true _failed=true
fi fi
fi fi
openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048 >> ${log_file} 2>&1 openssl dhparam -dsaparam -out /etc/nginx/ssl/dhparam.pem 2048 >> ${log_file} 2>&1
if [[ $? -ne 0 ]] ; then if [[ $? -ne 0 ]] ; then
_failed=true _failed=true
fi fi
@ -298,7 +298,7 @@ server {
# Diffie-Hellman parameter for DHE ciphersuites, recommended 2048 bits # Diffie-Hellman parameter for DHE ciphersuites, recommended 2048 bits
# #
# To generate a dhparam.pem file, run in a terminal # To generate a dhparam.pem file, run in a terminal
# openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048 # openssl dhparam -dsaparam -out /etc/nginx/ssl/dhparam.pem 2048
# #
ssl_dhparam /etc/nginx/ssl/dhparam.pem; ssl_dhparam /etc/nginx/ssl/dhparam.pem;