Only offers download if keysize >= 4096, added explanation

This commit is contained in:
redfast00 2016-10-08 20:58:02 +02:00
parent 8c880f9093
commit 30263b5550
No known key found for this signature in database
GPG key ID: B7DD106EAC545F95

View file

@ -715,9 +715,9 @@ confOpenVPN() {
# Build the server
${SUDOE} ./build-key-server --batch $SERVER_NAME
if (whiptail --backtitle "Setup OpenVPN" --title "Diffie-Hellman Parameters" --yesno "Generating Diffie-Hellman might take a long time on a Raspberry Pi. Do you want to download them?" $r $c)
if ( ("$ENCRYPT" >= 4096) && whiptail --backtitle "Setup OpenVPN" --title "Diffie-Hellman Parameters" --defaultno --yesno "Generating Diffie-Hellman parameters for a $ENCRYPT-bits key might take a long time on a Raspberry Pi. Do you want to download them? (If you're paranoid, choose 'No')" $r $c)
then
# Downloading parameters
# Downloading parameters, $KEY_DIR and $KEY_SIZE get set by sourcing ./vars
${SUDOE} curl "https://2ton.com.au/dhparam/${ENCRYPT}" -o "${KEY_DIR}/dh${KEY_SIZE}.pem"
else
# Generate Diffie-Hellman key exchange