Re: dh parameters
Nikos Mavrogiannopoulos <[email protected]> Tue, 17 Sep 2019 15:45:45 +0200
| Newsgroups | gmane.network.gnutls.general |
|---|---|
| Message-ID | <CAJU7zaJkxbWy0ZgShKPSXEUn=y4H9dyPMZhVgQ-+vDobbHKZ+A@mail.gmail.com> |
On Wed, Aug 28, 2019 at 7:56 AM Gregory Sloop <[email protected]> wrote: > > For some applications - say OpenVPN servers - I need a dh.pem [dh parameters file] > It looks like GNUTLS doesn't have the option to generate dh params like OpenSSL does, but has the following as a option: > certtool --get-dh-params --outfile dh.pem --sec-param ultra > > 1) Will that ^^ do what I want? Yes it will do what you want. Though you can always generate DH parameters with --generate-dh-params. There is no reason to however, more background in: https://www.gnutls.org/manual/html_node/Parameter-generation.html regards, Nikos