Ansible Role: Diffie-Hellman Parameters

This role uses OpenSSL to create strong Diffie-Hellman parameters.

Generating these keys can take a long time, depending on the system and the size of the key.

Role Variables

Examples

Create a 2048-bit dhparam once

- role: gronke.dhparam
  dhparam_size: 2048
  dhparam_file: /etc/ssl/dhparam.pem

Create dhparams with auto-update using a cron job

- role: gronke.dhparam
  dhparam_update_enabled: true

References

• Weak Diffie-Hellman and the Logjam Attack
• Raymii.org on Forward Secrecy & Diffie-Hellman Ephemeral Parameters