[OpenSSL] Diffie–Hellman (DH) key exchange with at least 2048 bits

openssl-dhparam.md

[OpenSSL] Diffie–Hellman (DH) key exchange with at least 2048 bits

Diffie–Hellman key exchange - Practical attacks on Internet traffic

Diffie-Hellman parameters

Generate PEM

$ openssl dhparam -out dhparams.pem 2048

With 4096 bits:

$ openssl dhparam -out dhparams.pem 4096

Nginx Server

server {
    # ...
    ssl_dhparam /etc/nginx/ssl/dhparams.pem;
}