Use ssl::dhparams

diff --git a/manifests/init.pp b/manifests/init.pp
index dbbf4f4b1b8722cabbe6030754907bc1196e0664..ed6b3dbd1f2cee0e0286f1533269e57642929b01 100644 (file)
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -20,11 +20,7 @@ class nginx inherits nginx::base {
   include ssl
 
   # See https://weakdh.org/
-  exec { 'openssl-nginx-gendh-2048':
-    command => 'openssl dhparam -out /etc/ssl/private/dhparams.pem 2048',
-    user    => root,
-    group   => root,
-    creates => '/etc/ssl/private/dh_2048.pem',
+  ssl::dhparams { 'openssl-nginx-gendh-2048':
     notify  => Service['nginx'],
   }