diff --git a/ca/main.php b/ca/main.php index 812f046..78da7e8 100644 --- a/ca/main.php +++ b/ca/main.php @@ -15,7 +15,7 @@ case 'dl_takey': break; case 'dl_dhparam': - upload("$config[private_dir]/dhparam1024.pem", "$config[ca_prefix]dhparam1024.pem", 'application/octet-stream'); + upload("$config[private_dir]/dhparam2048.pem", "$config[ca_prefix]dhparam2048.pem", 'application/octet-stream'); break; case 'dl_root': @@ -148,7 +148,7 @@ default:
Creating 1024 bit Diffie-Hellman parameters used by OpenVPN.
';
- print "Saving to $config[private_dir]/dhparam1024.pem.
";
- $cmd = "openssl dhparam -rand '$config[random]' -out '$config[private_dir]/dhparam1024.pem' 1024";
- print $cmd.'
';
- // This works but still errors in logs
+ #print '
Creating 1024 bit Diffie-Hellman parameters used by OpenVPN.
';
+ #print "Saving to $config[private_dir]/dhparam1024.pem.
";
+ #$cmd = "openssl dhparam -rand '$config[random]' -out '$config[private_dir]/dhparam1024.pem' 1024";
+ #print $cmd.'
';
+ #flush();
+ #flush_exec($cmd,100);
+
+ #print "Please ignore warnings about \"unable to write 'random state\'
";
+
+ // This method works but still errors in logs
// exec(DH . "-rand '$config[random]' -out '$config[private_dir]/dhparam1024.pem' 1024");
// exec(DH . " -out '$config[private_dir]/dhparam1024.pem' 1024");
+ print '
Creating 2048 bit Diffie-Hellman parameters used by OpenVPN.
';
+ print "Saving to $store_dir/dhparam2048.pem.
";
+ $cmd = "openssl dhparam -rand '$config[random]' -out '$config[private_dir]/dhparam2048.pem' 2048";
+ print $cmd.'
';
flush();
- flush_exec($cmd,100);
+ flush_exec($cmd,200);
- print "Please ignore warnings about \"unable to write 'random state\'
";
-
- #print '
Creating 2048 bit Diffie-Hellman parameters used by OpenVPN.
';
- #print "Saving to $store_dir/dhparam2048.pem.
";
- #$cmd = "openssl dhparam -rand '$config[random]' -out '$config[private_dir]/dhparam2048.pem' 2048";
- #print $cmd.'
';
- #flush();
- #flush_exec($cmd,200);
-
+ print "Please ignore warnings about \"unable to write 'random state\'
";
#
# Create a TLS auth key for OpenVPN if openvpn is installed