Pregenerated Diffie-Hellman parameters

coreybrett · Nov 16, 2015, 3:15 AM

Is the advice given here…
https://blog.g3rt.nl/openvpn-security-tips.html#4-generate-diffie-hellman-parameters
applicable to OpenVPN on pfSense?

If so, where would I put that file in the file system and how would I configure its use?

cmb · Nov 16, 2015, 3:58 AM

It's done automatically and always enabled.

You can generate your own DH parameters rather than using the static defaults if you want.
https://doc.pfsense.org/index.php/Importing_OpenVPN_DH_Parameters

coreybrett · Nov 16, 2015, 12:50 PM

Awesome!
Is /etc/dh-parameters.* unique per pfsense installation or is it the same for all installations?