install/openvpn
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

install_openvpn.sh: generate Diffie-Hellman 4096-bit Key using the -dsaparam option to decrease generation time by avoiding strong prime effort - Strong primes provide little to no security benefit but take a lot of effort to produce.

Browse Source
This commit is contained in:
Christoph 2020-03-08 14:36:31 +01:00
parent 7e0e60cc9c
commit 5f73003638
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
install_openvpn.sh
View File

@ -1619,7 +1619,8 @@ fi
echononl " Generates DH (Diffie-Hellman) parameters (dh key).."
if [[ "$os_dist" = "debian" ]] && [[ $os_version -lt 10 ]] ; then
if [[ -f "${script_dir}/dh${KEY_SIZE}.pem" ]]; then
cp "${script_dir}/dh${KEY_SIZE}.pem" "${OPENVPN_KEY_DIR}/dh${KEY_SIZE}.pem" > "$log_file" 2>&1
#cp "${script_dir}/dh${KEY_SIZE}.pem" "${OPENVPN_KEY_DIR}/dh${KEY_SIZE}.pem" > "$log_file" 2>&1
openssl dhparam -dsaparam -out "${OPENVPN_KEY_DIR}/dh${KEY_SIZE}.pem" ${KEY_SIZE} > "$log_file" 2>&1
else
${EASY_RSA_DIR}/build-dh > "$log_file" 2>&1
fi
@ -1634,7 +1635,8 @@ else
if [[ -f "${script_dir}/dh${KEY_SIZE}.pem" ]]; then
cp "${script_dir}/dh${KEY_SIZE}.pem" "${OPENVPN_KEY_DIR}/dh.pem" > "$log_file" 2>&1
else
${EASY_RSA_DIR}/easyrsa gen-dh > "$log_file" 2>&1
#${EASY_RSA_DIR}/easyrsa gen-dh > "$log_file" 2>&1
openssl dhparam -dsaparam -out "${OPENVPN_KEY_DIR}/dh.pem" ${KEY_SIZE} > "$log_file" 2>&1
fi
if [[ $? -eq 0 ]] ; then
echo_ok