Viktor Dukhovni:

It is easy to set up a cron job that runs every 30 days,

Hello,

that's the first time I personally note a specific time windows.
Thanks for sharing your position.

I also regenerate dhparameter on monthly base,
not every month but approximately every half year...

  if [ "$( hexdump -n 1 -e '/2 "%u"' /dev/urandom )" -gt 42 ]; then
    echo 'skip dh generation this month'
  else
    ... new dh parameter
  fi

Andreas

Reply via email to