Remove -dsaparam option from openssl dhparam

This commit is contained in:
Edi Septriyanto
2021-08-22 23:41:19 +07:00
parent cb3230a1ad
commit 0ea83eebb6
2 changed files with 3 additions and 3 deletions

View File

@@ -517,8 +517,8 @@ function enable_ssl() {
if [ ! -f /etc/nginx/ssl/dhparam-2048.pem ]; then
echo "Generating Diffie-Hellman parameters for enhanced HTTPS/SSL security."
run openssl dhparam -dsaparam -out /etc/nginx/ssl/dhparam-2048.pem 2048
#run openssl dhparam -dsaparam -out /etc/nginx/ssl/dhparam-4096.pem 4096
run openssl dhparam -out /etc/nginx/ssl/dhparam-2048.pem 2048
#run openssl dhparam -out /etc/nginx/ssl/dhparam-4096.pem 4096
fi
# Update vhost config.

View File

@@ -1487,7 +1487,7 @@ function init_nginx_install() {
echo "Enhancing HTTPS/SSL security with DH key..."
[ ! -d /etc/nginx/ssl ] && mkdir -p /etc/nginx/ssl
run openssl dhparam -dsaparam -out "/etc/nginx/ssl/dhparam-${DH_LENGTH}.pem" "${DH_LENGTH}"
run openssl dhparam -out "/etc/nginx/ssl/dhparam-${DH_LENGTH}.pem" "${DH_LENGTH}"
fi
# Final test.