From c70b67051bd04e31419215041c9632d725577fbe Mon Sep 17 00:00:00 2001
From: Bob Mottram <bob@robotics.uk.to>
Date: Sun, 16 Aug 2015 09:30:57 +0100
Subject: [PATCH] Add an option for 2048bit dhparams

---
 src/freedombone-sec | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/src/freedombone-sec b/src/freedombone-sec
index 2b4056e3..9bd7033e 100755
--- a/src/freedombone-sec
+++ b/src/freedombone-sec
@@ -346,9 +346,10 @@ function regenerate_dh_keys {
       trap "rm -f $data" 0 1 2 5 15
       dialog --backtitle "Freedombone Security Configuration" \
              --title "Diffie-Hellman key length" \
-             --radiolist "The smaller length is better suited to low power embedded systems:" 10 40 2 \
+             --radiolist "The smaller length is better suited to low power embedded systems:" 12 40 3 \
              1 "1024 bits" off \
-             2 "3072 bits" on 2> $data
+             2 "2048 bits" on \
+             3 "3072 bits" off 2> $data
       sel=$?
       case $sel in
           1) exit 1;;
@@ -356,7 +357,8 @@ function regenerate_dh_keys {
       esac
       case $(cat $data) in
           1) DH_KEYLENGTH=1024;;
-          2) DH_KEYLENGTH=3072;;
+          2) DH_KEYLENGTH=2048;;
+          3) DH_KEYLENGTH=3072;;
       esac
 
       ctr=0