Skip to content

Commit 46d4699

Browse files
committed
Set DH timeout to accommodate low performance CPUs
On a Raspberry Pi B+ the Diffie-Hellman parameter generation for a 2048 key was measured to take 229m45.379s wall clock time. Set the respective command's timeout 50% above this, to prevent the corresponding rule from timing out. Add missing timeout for EasyRSA 3.0
1 parent fb3381e commit 46d4699

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

manifests/ca.pp

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -92,7 +92,7 @@
9292

9393
exec { "generate dh param ${name}":
9494
command => '. ./vars && ./clean-all && ./build-dh',
95-
timeout => 1800,
95+
timeout => 20000,
9696
cwd => "${etc_directory}/openvpn/${name}/easy-rsa",
9797
creates => "${etc_directory}/openvpn/${name}/easy-rsa/keys/dh${ssl_key_size}.pem",
9898
provider => 'shell',
@@ -166,6 +166,7 @@
166166

167167
exec { "generate dh param ${name}":
168168
command => './easyrsa --batch gen-dh',
169+
timeout => 20000,
169170
cwd => "${etc_directory}/openvpn/${name}/easy-rsa",
170171
creates => "${etc_directory}/openvpn/${name}/easy-rsa/keys/dh.pem",
171172
provider => 'shell',

0 commit comments

Comments
 (0)