aboutsummaryrefslogtreecommitdiff
path: root/manifests/dhparams.pp
blob: 75c4595245d7866b475ff1afa7eb1fb3ed079881 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
# See DHE params deployment - https://weakdh.org/sysadmin.html
define ssl::dhparams(
  $prefix = 'dhparams',
  $size   = '2048',
  $folder = '/etc/ssl/dhparams'
)
{
  exec { "${name}":
    command => "openssl dhparam -out ${folder}/${prefix}_${size}.pem ${size}",
    user    => root,
    group   => root,
    creates => "${folder}/${prefix}_${size}.pem",
  }
}