# directors to verify the authenticity of this file daemon
TLS Certificate = "/etc/bacula/bacula-fd.pem"
TLS Key = "/etc/bacula/bacula-fd.pem"
- TLS DH File = "/etc/bacula/dh1024.pem"
+ TLS DH File = "/etc/bacula/dh2048.pem"
}
#
}
generate_dh() {
- DH_FILE=/etc/bacula/dh1024.pem
+ DH_FILE=/etc/bacula/dh2048.pem
if [ -s $DH_FILE ]; then
echo $DH_FILE already exists, skipping.
umask 077
echo Generating $DH_FILE
- openssl dhparam -out $DH_FILE -5 1024
+ ###openssl dhparam -out $DH_FILE -5 1024
+ openssl dhparam -out $DH_FILE -2 2048
+
fi
}