1
0
mirror of https://github.com/Nyr/openvpn-install.git synced 2024-12-01 01:16:05 +03:00

Add 4096 bits DH

This commit is contained in:
Angristan 2016-03-09 21:11:13 +01:00
parent 85c466e634
commit 5bc1d8e37a

View File

@ -211,6 +211,9 @@ else
chown -R root:root /etc/openvpn/easy-rsa/ chown -R root:root /etc/openvpn/easy-rsa/
rm -rf ~/EasyRSA-3.0.1.tgz rm -rf ~/EasyRSA-3.0.1.tgz
cd /etc/openvpn/easy-rsa/ cd /etc/openvpn/easy-rsa/
cp vars.example vars
#Use 4096 bits DH instead of 2048 bits
echo "set_var EASYRSA_KEY_SIZE 4096" >> vars
# Create the PKI, set up the CA, the DH params and the server + client certificates # Create the PKI, set up the CA, the DH params and the server + client certificates
./easyrsa init-pki ./easyrsa init-pki
./easyrsa --batch build-ca nopass ./easyrsa --batch build-ca nopass