# See DHE params deployment - https://weakdh.org/sysadmin.html
define ssl::dhparams(
  $prefix = 'dhparams',
  $size   = '2048',
  $folder = '/etc/ssl/dhparams'
)
{
  exec { "${name}":
    command => "openssl dhparam -out ${folder}/${prefix}_${size}.pem ${size}",
    user    => root,
    group   => root,
    creates => "${folder}/${prefix}_${size}.pem",
  }
}