On 19.08.2015 23:37, Rainer Duffner wrote: > Maybe pfSense is smart enough to figure out that maybe my aging ALIX > board is just too slow for this? > [2.2.4-RELEASE][[email protected] > <http://pfsense.example.org/>]/tmp: time openssl dhparam -out > dhparams.pem 2048 Generating DH parameters, 2048 bit long safe prime, > generator 2 This is going to take a long time > ..........................................................+..........................................................+..............................................................................................................................................................................................................................+............................................................................................+......................................................................+......................................................+..........................................................................................................................................................+............................................+.........................+.........+......+...............+.....................................................................+...........................................................................................+............................................................................++*++* > unable to write 'random state' 844.901u 0.105s 15:05.79 93.2% 613+197k > 0+2io 13pf+0w I also can’t find any security-advisory on this. > _______________________________________________ pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list Support the project > with Gold! https://pfsense.org/gold Hi Rainer,
you can generate the dhparams.pem on another (faster) system and then copy the file to the pfsense host. The once generated DH parameters (in the file) will than be simply used on the pfsense host. Best regards, Claudio Thomas -- Working on OpenWrt CC for Xmodus GSM Router XM1710E <http://www.xmodus-systems.de/openwrt> _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
