decrease the number of bits used in creation of DH parameter to a mor…

…e reasonable value
jodyboucher · Mar 29, 2017 · 211167b · 211167b
1 parent 15c281d
commit 211167b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tasks/configure.yml b/tasks/configure.yml
@@ -28,7 +28,7 @@
   notify: reload nginx
 
 - name: Generate strong Ephemeral Diffie-Hellman (DHE) parameter
-  command: openssl dhparam -out dhparams.pem 4096
+  command: openssl dhparam -out dhparams.pem 2048
   args:
     chdir: "{{ nginx_path_ssl_conf }}"
     creates: "{{ nginx_path_ssl_conf }}/dhparams.pem"