6

This question already has an answer here:

I'm deploying several servers with TLS. The servers are different but related and each having their own certificate generated by letsencrypt.

To increase the security, I'm generating my own Diffie Hellman group.

openssl dhparam -out dhparams.pem 2048

The question now is whether this dhparams.pem file is considered secret and if I need a unique one for each server?

Ideally I would like to include the dhparams.pem file in my distribution package and install the same file on every server. This is so that the group will be unique for my group of servers, yet not every server in the group. Would this be alright security-wise?

marked as duplicate by WhiteWinterWolf, Neil Smithline, Matthew, Bob Brown, Ohnana Jul 2 '16 at 19:40

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

Browse other questions tagged or ask your own question.