Page 1 of 1

Need Help Changing OpenVPN to 2048 Bit RSA from 1024 Bit RSA

Posted: Sat Aug 24, 2013 12:27 pm
by jtpreston
I wanted to change OpenVPN to 2048 Bit RSA from 1024 Bit RSA. I noticed "Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA" in my log and I know that 2048 bit is more secure and just about as fast. I was wondering how to do this with OpenVPN through Amahi. I use Ubuntu 12.04. I also run Ubuntu as a virtual machine through Parallels 8 on my iMac.

Re: Need Help Changing OpenVPN to 2048 Bit RSA from 1024 Bit

Posted: Sun Aug 25, 2013 6:36 pm
by bigfoot65
Try this article.
http://openvpn.net/index.php/open-sourc ... howto.html

It explains how and where you need to make changes.

Re: Need Help Changing OpenVPN to 2048 Bit RSA from 1024 Bit

Posted: Mon Aug 26, 2013 7:40 am
by jtpreston
So I would run openssl dhparam -out dh2048.pem 2048 from Terminal and it would replace the existing 1024 bit Diffie-Hellman parameters to 2048 bit? I would not need to move anything to another file location or make a change in the openvpn.conf file in /etc/openvpn ?

Re: Need Help Changing OpenVPN to 2048 Bit RSA from 1024 Bit

Posted: Tue Aug 27, 2013 2:16 pm
by bigfoot65
Sorry, I have no idea. This is not something that I have much experience with. Maybe you can play around and add some guidance to the wiki when you figure it all out.