#TIL : Generate dhparam file faster


07 Sep 2017 / by KhanhIceTea

openssl uses strong prime (which is useless for security but requires an awful lot more computational effort. A "strong prime" is a prime p such that (p-1)/2 is also prime). So it will be faster if we add option -dsaparam to the command

$ openssl dhparam -dsaparam -out /etc/ssl/private/dhparam.pem 4096

Ref : https://security.stackexchange.com/a/95184


Sound good ?