Ansible Role: Diffie-Hellman Parameters

Uses OpenSSL to generate strong Diffie-Hellman parameters.

Depending on the system and key size generating this keys can take a very long time.

Role Variables

Examples

Generate dhparams with 2048 bit once

- role: gronke.dhparam
  dhparam_size: 2048
  dhparam_file: /etc/ssl/dhparam.pem

Generate dhparams with auto-update cronjob

- role: gronke.dhparam
  dhparam_update_enabled: true

References

• Weak Diffie-Hellman and the Logjam Attack
• Raymii.org on Forward Secrecy & Diffie Hellman Ephemeral Parameters