#!/bin/sh set -ef for k in 1024 2048 ; do f="dh${k}.pem" echo "# openssl genpkey: $f" >&2 timeout --kill-after=32s 30s \ openssl genpkey -quiet -genparam -algorithm DH -out "./$f" -pkeyopt "dh_paramgen_prime_len:${k}" done for k in 2048 3072 4096 ; do f="ffdhe${k}.pem" echo "# openssl genpkey: $f" >&2 timeout --kill-after=32s 30s \ openssl genpkey -quiet -genparam -algorithm DH -out "./$f" -pkeyopt "group:ffdhe${k}" done