initial commit

scripts/openssl-generate-dh-bundle.sh

@@ -0,0 +1,16 @@
+#!/bin/sh
+set -ef
+
+for k in 1024 2048 ; do
+	f="dh${k}.pem"
+	echo "# openssl genpkey: $f" >&2
+	timeout --kill-after=32s 30s \
+	openssl genpkey -quiet -genparam -algorithm DH -out "./$f" -pkeyopt "dh_paramgen_prime_len:${k}"
+done
+
+for k in 2048 3072 4096 ; do
+	f="ffdhe${k}.pem"
+	echo "# openssl genpkey: $f" >&2
+	timeout --kill-after=32s 30s \
+	openssl genpkey -quiet -genparam -algorithm DH -out "./$f" -pkeyopt "group:ffdhe${k}"
+done