openssl uses strong prime (which is useless for security but requires an awful lot more computational effort. A "strong prime" is a prime p such that (p-1)/2 is also prime). So it will be faster if we add option -dsaparam
to the command
$ openssl dhparam -dsaparam -out /etc/ssl/private/dhparam.pem 4096