From: Rafael dos Santos Silva Date: Thu, 22 Dec 2016 16:54:21 +0000 (-0200) Subject: Use a 2048 dhparam again X-Git-Url: https://vcs.fsf.org/?a=commitdiff_plain;h=042e3297e2fa7b568e39354dedace4b26ea9b297;p=discourse_docker.git Use a 2048 dhparam again 4096 takes 16x as long, we can't allow several hours installs https://meta.discourse.org/t/prime-calculation-for-openssl-just-goes-on/54653/5?u=falco --- diff --git a/templates/web.ssl.template.yml b/templates/web.ssl.template.yml index 17cadad..b1ce928 100644 --- a/templates/web.ssl.template.yml +++ b/templates/web.ssl.template.yml @@ -3,7 +3,7 @@ run: cmd: # Generate strong Diffie-Hellman parameters - "mkdir -p /shared/ssl/" - - "[ -e /shared/ssl/dhparams.pem ] || openssl dhparam -out /shared/ssl/dhparams.pem 4096" + - "[ -e /shared/ssl/dhparams.pem ] || openssl dhparam -out /shared/ssl/dhparams.pem 2048" - replace: filename: "/etc/nginx/conf.d/discourse.conf" from: /server.+{/