When creating Diffie Hellman parameters for OpenSSH, there's a two-step process which looks like this to generate and filter secure primes for Diffie Hellman key exchange:
ssh-keygen -b 4096 -G dh4096-insecure
ssh-keygen -f dh4096-insecure -T dh4096
When reading the OpenVPN documentation, they recommend generating DH parameters like so:
openssl dhparam 2048 -out dh2048.pem
Is there a way to filter these primes for safety before using them with OpenVPN?