$OpenBSD: patch-raddb_certs_bootstrap,v 1.1 2016/11/19 12:13:23 sthen Exp $
--- raddb/certs/bootstrap.orig	Sat Nov 19 11:56:33 2016
+++ raddb/certs/bootstrap	Sat Nov 19 12:03:02 2016
@@ -32,7 +32,7 @@ fi
 #  re-generate these commands.
 #
 if [ ! -f dh ]; then
-  openssl dhparam -out dh 1024 || exit 1
+  openssl dhparam -out dh 2048 || exit 1
   if [ -e /dev/urandom ] ; then
 	ln -sf /dev/urandom random
   else
