Change Details

Research if generation speed of Diffie-Hellman parameters for SSL can be improved w/o compromising on security. Idea: https://security.stackexchange.com/a/95184 (addeding `-dsaparam` to openssl) Background: The currently used `/usr/bin/openssl dhparam -out {{ dh_params_location }} 4096` takes its fine time, especially running on VMs, which is a hindrance in setting up new dev/test machines with playbooks containing this step.

Research if generation speed of Diffie-Hellman parameters for SSL can be improved w/o compromising on security. Idea: adding `-dsaparam` to openssl Background: The currently used `/usr/bin/openssl dhparam -out /etc/ssl/private/dhparams.pem 4096` takes its fine time, especially running on VMs, which is a hindrance in setting up new dev/test machines with playbooks containing this step. Reads: * https://security.stackexchange.com/a/95184 * https://news.ycombinator.com/item?id=10391576

Research if generation speed of Diffie-Hellman parameters for SSL can be improved w/o compromising on security. Idea: https://security.stackexchange.com/a/95184 (addeadding `-dsaparam` to openssl) Background: The currently used `/usr/bin/openssl dhparam -out {{ dh_params_location }}/etc/ssl/private/dhparams.pem 4096` takes its fine time, especially running on VMs, which is a hindrance in setting up new dev/test machines with playbooks containing this step. Reads: * https://security.stackexchange.com/a/95184 * https://news.ycombinator.com/item?id=10391576