cb601/edh-keygen
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Content has been refined

Browse Source
This commit is contained in:
Stephan Düsterhaupt
2025-05-18 15:10:25 +02:00
parent f67991ab87
commit d6ee9b8341
1 changed files with 13 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
README.md
View File

@@ -1,6 +1,16 @@
# edh-keygen
# 🔐 edh-keygen
Automated Diffie-Hellman key generation and service management tool
Provides flexible configuration, systemd integration and clean RPM packaging.
Automated Diffie-Hellman key generation and service management script with flexible configuration and systemd integration and RPM packaging.
This utility simplifies the generation and management of Diffie-Hellman (DH) parameters used for Perfect Forward Secrecy (PFS) in secure communication services such as Postfix, Dovecot, Ejabberd and others. It ensures that DH keys are regularly refreshed, properly permissioned and integrated with systemd for reliable automation.
Key features:
- 🔁 Automated generation of DH key files (e.g., dh2048.pem)
- ⚙️ Service reload hooks to apply new keys without downtime
- 🛠️ Easy configuration via edh-keygen.conf
- 📦 Distributed as an RPM package for clean system integration
- 🔐 Designed to enhance TLS security through PFS
---
@@ -133,7 +143,7 @@ chmod 750 /etc/cron.weekly/edh-keygen
## License
[MIT](https://dev.town-square.de/cb601/edh-keygen/LICENSE)
[MIT](https://dev.town-square.de/cb601/edh-keygen/src/branch/main/LICENSE)
## Authors