generate dhparam locally rather than on vpn server