Use ffdhe2048 DH parameters from RFC 7919

[chef.git] / cookbooks / ssl / recipes / default.rb

diff --git a/cookbooks/ssl/recipes/default.rb b/cookbooks/ssl/recipes/default.rb
index 4ec5e85c333de9af235a6c24108292d3df9e7011..c540b929842c03bd30c4d442148bd4e60e84de55 100644 (file)
--- a/cookbooks/ssl/recipes/default.rb
+++ b/cookbooks/ssl/recipes/default.rb
@@ -27,8 +27,9 @@ cookbook_file "/etc/ssl/certs/letsencrypt.pem" do
   backup false
 end
 
   backup false
 end
 

-openssl_dhparam "/etc/ssl/certs/dhparam.pem" do
+cookbook_file "/etc/ssl/certs/dhparam.pem" do

   owner "root"
   group "root"
   mode "444"
   owner "root"
   group "root"
   mode "444"

+  backup false

 end
 end