From bd716cce7405e277694f1a98a25321c946a28a6f Mon Sep 17 00:00:00 2001
From: Ian Gulliver <flamingcow@google.com>
Date: Fri, 21 Oct 2016 11:54:46 -0700
Subject: [PATCH] Set -dsaparam when generating dhparam for speed

---
 server/modules/certclient.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/modules/certclient.py b/server/modules/certclient.py
index 97fbac3..8aa1056 100755
--- a/server/modules/certclient.py
+++ b/server/modules/certclient.py
@@ -130,7 +130,7 @@ fi
 
 if test "%(dh)s" = "y"; then
   if test ! -s "${DH}"; then
-    openssl dhparam -out "${DH}" 2048
+    openssl dhparam -dsaparam -out "${DH}" 2048
   fi
   ln --symbolic --force $(basename "${DH}") "${DH_LINK}"
 fi