Diffie Hellman parameters slow calculating
The reasonable solution would be to add the -dsaparam option.
1
openssl dhparam -dsaparam -out /etc/ssl/private/dhparam.pem 4096
For comparison.
1
2
3
4
time openssl dhparam -dsaparam -out dhparam.pem 4096
Generating DSA parameters, 4096 bit long prime
+
openssl dhparam -dsaparam -out dhparam.pem 4096 4,42s user 0,15s system 99% cpu 4,574 total
1
2
3
4
5
time openssl dhparam -out dhparam.pem 4096
Generating DH parameters, 4096 bit long safe prime, generator 2
This is going to take a long time
+
openssl dhparam -out dhparam.pem 4096 100,27s user 1,60s system 99% cpu 1:41,93 total
Dieser Eintrag ist vom Autor unter
CC BY 4.0
lizensiert.