openssl genrsa -out /etc/ssl/private/transmission.4096.key 4096
openssl dhparam -out /etc/ssl/private/transmission.dh2048.key 2048
chmod o-r /etc/ssl/private/transmission.*
chown root:www-data /etc/ssl/private/transmission.*