On Wed, Aug 28, 2019 at 7:56 AM Gregory Sloop <[email protected]> wrote: > > For some applications - say OpenVPN servers - I need a dh.pem [dh parameters > file] > It looks like GNUTLS doesn't have the option to generate dh params like > OpenSSL does, but has the following as a option: > certtool --get-dh-params --outfile dh.pem --sec-param ultra > > 1) Will that ^^ do what I want?
Yes it will do what you want. Though you can always generate DH parameters with --generate-dh-params. There is no reason to however, more background in: https://www.gnutls.org/manual/html_node/Parameter-generation.html regards, Nikos _______________________________________________ Gnutls-help mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnutls-help
