From a275b3ae454ea40e28b2704b6b24915ea871b96a Mon Sep 17 00:00:00 2001
From: Carlos Ferreira <c.ferreira@acsiiweb.com>
Date: Wed, 7 Nov 2018 19:14:36 +0100
Subject: [PATCH] Add note about ffdhe2048

Optional to merge.
Only to clarify things.
---
 openvpn-install.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/openvpn-install.sh b/openvpn-install.sh
index 8b56327..41a2897 100644
--- a/openvpn-install.sh
+++ b/openvpn-install.sh
@@ -246,6 +246,7 @@ else
 	# Generate key for tls-auth
 	openvpn --genkey --secret /etc/openvpn/ta.key
 	# Create the DH parameters file using the predefined ffdhe2048 group
+	# See https://wiki.mozilla.org/Security/Server_Side_TLS#Pre-defined_DHE_groups
 	echo '-----BEGIN DH PARAMETERS-----
 MIIBCAKCAQEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz
 +8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a