<?xml version="1.0"?>
<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/><title>mkdhparams</title><link rel="stylesheet" type="text/css" href="style.css"/><meta name="generator" content="DocBook XSL Stylesheets V1.78.1"/><link rel="home" href="#idm255220919296" title="mkdhparams"/><link xmlns="" rel="stylesheet" type="text/css" href="manpage.css"/><meta xmlns="" name="MSSmartTagsPreventParsing" content="TRUE"/><link xmlns="" rel="icon" href="icon.gif" type="image/gif"/><!--

Copyright 1998 - 2009 Double Precision, Inc.  See COPYING for distribution
information.

--></head><body><div class="refentry"><a id="idm255220919296" shape="rect"> </a><div class="titlepage"/><div class="refnamediv"><h2>Name</h2><p>mkdhparams — create DH parameter file</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="command">@sbindir@/mkdhparams</code> </p></div></div><div class="refsect1"><a id="idm255225374704" shape="rect"> </a><h2>DESCRIPTION</h2><p>
      This script creates new DH parameters and saves them in
      <code class="filename">@certsdir@/dhparams.pem</code>. If this file already exists
      and it's less than 25 days old, the script returns immediately.
      If this file is over 25 days old, new DH parameters get generated and
      the file gets replaced.
    </p><p>
      This script is intended to be execute when the system boots, or from
      a monthly cron job.
    </p></div><div class="refsect1"><a id="idm255225372048" shape="rect"> </a><h2>FILES</h2><div class="variablelist"><dl class="variablelist"><dt><span class="term">@certsdir@/dhparams.pem</span></dt><dd>
	    DH Parameter file.
	  </dd></dl></div></div><div class="refsect1"><a id="idm255225369200" shape="rect"> </a><h2>ENVIRONMENT VARIABLES</h2><div class="variablelist"><dl class="variablelist"><dt><span class="term">BITS</span></dt><dd>
	    Customize the DH parameter bit size. The default value depends on
	    whether this script uses OpenSSL or GnuTLS libraries. For OpenSSL
	    the default number of bits is 2048. GnuTLS uses a security level
	    setting, rather than the number of bits, and the default
	    security level is "high".
	  </dd></dl></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
      It make take several minutes to generate new DH parameters with the
      default strength.
    </p></div><div class="refsect1"><a id="idm255220088576" shape="rect"> </a><h2>SEE ALSO</h2><p>
      <a class="ulink" href="courier.html" target="_top" shape="rect"><span class="citerefentry"><span class="refentrytitle">courier</span>(8)</span></a></p></div></div></body></html>
