Diffie-Hellman Key Exchange is a way to securely share encryption keys publicly between two parties. It's used in TLS and SSL connections to provide Perfect Forward Secrecy. Unfortunately, the default DH parameters distributed with applications are susceptible to a downgrade attack.
debops.dhparam Ansible role will generate a set of strong
Diffie-Hellman parameters on the Ansible Controller, which will be preseeded on
remote hosts, and will be ready to use by other applications. A separate script
can then be used on remote hosts in the background to generate new random DH
parameters, either once or in regular intervals.
- Getting started
- debops.dhparam default variables
debops.dhparam - Manage one or multiple sets of Diffie-Hellman Ephemeral parameters Copyright (C) 2015-2017 Maciej Delmanowski <email@example.com> Copyright (C) 2015-2017 Robin Schneider <firstname.lastname@example.org> Copyright (C) 2015-2017 DebOps <https://debops.org/> SPDX-License-Identifier: GPL-3.0-only This Ansible role is part of DebOps. DebOps is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 3, as published by the Free Software Foundation. DebOps is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with DebOps. If not, see https://www.gnu.org/licenses/.