initial commit with empty 8192 bit key

files/dh-1024.pem

@@ -0,0 +1,5 @@
+-----BEGIN DH PARAMETERS-----
+MIGHAoGBANT1Mq4Em+/oCNi4HTmM0/WBvmu01NXbQTAlfQt7KoEicyFTgFaZP1Kq
+6QK8srTyHKcZamtpSpSnm5zJXowYpcby5/ftZqll90WpKY1lFad21cXtf+GfzmSP
+8EUNkA0yrguHWgeYS1GEWYil6NoNUaB2q6jZWhi4PdH1Ujd+Xm67AgEC
+-----END DH PARAMETERS-----

files/dh-2048.pem

@@ -0,0 +1,8 @@
+-----BEGIN DH PARAMETERS-----
+MIIBCAKCAQEAvVPfuft6GGqKkLPvbX01zlMM0QCaRdOiZI0guwXZUgEgPxCcTcwv
+GICqTv8SfblBvaOzkl8AYFXpAkskUU9LTiZJbS552zYBZhzOYJ9okPzZNtzIAaTV
+1lh9GjHhZcn3UK+6edf/CySiihBnQpPruH/qrojgAY8UPtxM/ZAOAiktrsj317Gt
+PapWXZW6V+xx5iyzKIBrhYKmLkr6FtA2/yM0txfqb89ny4OJECn213TW2n8xmEvG
+iB9nL7tzheNLAmU9phee1XzRMYzzocHIFKGYVmwZNgp1dV/fzTBMs8NBp7NHoNqf
+capxMTVeniCiKqhSE2ycNxLtNgj5mwAZYwIBAg==
+-----END DH PARAMETERS-----

files/dh-4096.pem

@@ -0,0 +1,13 @@
+-----BEGIN DH PARAMETERS-----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=
+-----END DH PARAMETERS-----

files/regeneratekeys.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+openssl dhparam 1024 > dh-1024.pem &
+openssl dhparam 2048 > dh-2048.pem &
+openssl dhparam 4096 > dh-4096.pem &
+openssl dhparam 8192 > dh-8192.pem

tasks/main.yml

@@ -0,0 +1,19 @@
+- name: copy dh param
+  copy:
+    src: "dh-{{ item }}.pem"
+    dest: "/etc/ssl/dh-{{ item }}.pem"
+  with_items:
+    - 1024
+    - 2048
+    - 4096
+    - 8192
+
+- name: create link to default dh param
+  file:
+    src: /etc/ssl/dh-4096.pem
+    dest: /etc/ssl/dhparams.pem
+    owner: root
+    group: root
+    state: link
+    mode: 0644
+