On 03/04/17 15:12, Jan Just Keijser wrote: > Hi Samuli, > > On 03/04/17 15:53, Samuli Seppänen wrote:
>> >> I tested these changes on Debian 8 which has OpenSSL-1.0.1. Key size was >> set to 4096-bits and signature algorithm to SHA256WithRSAEncryption. >> >> The only real issue was DH parameter generation: it took ~25 minutes on >> my Intel i5 laptop. Is that acceptable default behavior? >> > what kind of i5 is this? on my i7-4810 it took 5 minutes. Can you give the > full CPUID string (from /proc/cpuinfo) ? then I can > guestimate whether the 25 minutes is realistic for slower hardware. > I have a selection of dh-4096b.pem files generated on my i5-2450 @2.5ghz The time taken to generate each ranged from only a couple of minutes to a little over an hour. I wrote a little batch file to record the actual time taken for each. So, I would say 25mins is perfectly normal. Regards ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
