How to generate DH 1024 certificate with crt and key file for nginx?

Question

Nginx

How to generate DH 1024 certificate with crt and key file for nginx?
Tried

openssl dhparam -out dhparam.pem 1024
openssl genpkey -paramfile dhparam.pem -out dhkey.pem

Nginx swears that the certificate is not suitable.

Answer 1

You do not confuse dhparm with a regular certificate.
Flies separately, cutlets separately.

openssl req -new -newkey rsa:2048 -sha256 -days 365 -nodes -x509 -keyout server.key -out server.crt

Answer 2

dhparam generates a starting Diffie-Hellman number for SSL, this is indirectly related to certificates. It is needed to prevent the attack of lowering the stability of the starting number, since the standard starting numbers are well known, it is possible to force the system to switch to an unstable number and carry out an attack