From 0ea83eebb62fbb703703ab9a824cc45beb15ef66 Mon Sep 17 00:00:00 2001 From: Edi Septriyanto Date: Sun, 22 Aug 2021 23:41:19 +0700 Subject: [PATCH] Remove -dsaparam option from openssl dhparam --- lib/lemper-manage.sh | 4 ++-- scripts/install_nginx.sh | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/lemper-manage.sh b/lib/lemper-manage.sh index 994f408..f2016d5 100755 --- a/lib/lemper-manage.sh +++ b/lib/lemper-manage.sh @@ -517,8 +517,8 @@ function enable_ssl() { if [ ! -f /etc/nginx/ssl/dhparam-2048.pem ]; then echo "Generating Diffie-Hellman parameters for enhanced HTTPS/SSL security." - run openssl dhparam -dsaparam -out /etc/nginx/ssl/dhparam-2048.pem 2048 - #run openssl dhparam -dsaparam -out /etc/nginx/ssl/dhparam-4096.pem 4096 + run openssl dhparam -out /etc/nginx/ssl/dhparam-2048.pem 2048 + #run openssl dhparam -out /etc/nginx/ssl/dhparam-4096.pem 4096 fi # Update vhost config. diff --git a/scripts/install_nginx.sh b/scripts/install_nginx.sh index 643b055..fd4619c 100755 --- a/scripts/install_nginx.sh +++ b/scripts/install_nginx.sh @@ -1487,7 +1487,7 @@ function init_nginx_install() { echo "Enhancing HTTPS/SSL security with DH key..." [ ! -d /etc/nginx/ssl ] && mkdir -p /etc/nginx/ssl - run openssl dhparam -dsaparam -out "/etc/nginx/ssl/dhparam-${DH_LENGTH}.pem" "${DH_LENGTH}" + run openssl dhparam -out "/etc/nginx/ssl/dhparam-${DH_LENGTH}.pem" "${DH_LENGTH}" fi # Final test.