sous-chefs / certificate

Development repository for the certificate cookbook
https://supermarket.chef.io/cookbooks/certificate
73 stars 43 forks source link

Support for adding dhparams file on apache and nginx #18

Closed aalmenar closed 5 years ago

aalmenar commented 10 years ago

Apache 2.4 can have a DHParams file to be faster while using DHE ciphers and so on.

Nginx can use also this file on the ssl_dhparam.

hrak commented 7 years ago

you can use the openssl_dhparam resource from openssl cookbook for this:

Like so:

openssl_dhparam '/etc/nginx/ssl/dhparam.pem' do
  key_length 2048
  generator 2
end