1
0
mirror of https://github.com/Nyr/openvpn-install.git synced 2024-11-28 07:56:07 +03:00

Add 4096 bits DH

This commit is contained in:
Angristan 2016-03-09 21:08:24 +01:00
parent 5472ce44aa
commit a7e89ed0dd

View File

@ -107,6 +107,9 @@ if [[ -e /etc/openvpn/server.conf ]]; then
fi fi
CLIENT=$(tail -n +2 /etc/openvpn/easy-rsa/pki/index.txt | grep "^V" | cut -d '=' -f 2 | sed -n "$CLIENTNUMBER"p) CLIENT=$(tail -n +2 /etc/openvpn/easy-rsa/pki/index.txt | grep "^V" | cut -d '=' -f 2 | sed -n "$CLIENTNUMBER"p)
cd /etc/openvpn/easy-rsa/ cd /etc/openvpn/easy-rsa/
cp vars.example vars
#Use 4096 bits DH instead of 2048 bits
echo "set_var EASYRSA_KEY_SIZE 4096" >> vars
./easyrsa --batch revoke $CLIENT ./easyrsa --batch revoke $CLIENT
./easyrsa gen-crl ./easyrsa gen-crl
rm -rf pki/reqs/$CLIENT.req rm -rf pki/reqs/$CLIENT.req