Note command to create DH file

diff --git a/raddb/eap.conf b/raddb/eap.conf
index a3c191b..72193ed 100644 (file)
--- a/raddb/eap.conf
+++ b/raddb/eap.conf
@@ -133,6 +133,12 @@
                        #  Trusted Root CA list
                #       CA_file = ${raddbdir}/certs/demoCA/cacert.pem
 
+                       #
+                       #  For DH cipher suites to work, you have to
+                       #  run OpenSSL to create the DH file first:
+                       #
+                       #       openssl dhparam -out certs/dh 1024
+                       #
                #       dh_file = ${raddbdir}/certs/dh
                #       random_file = ${raddbdir}/certs/random