dh params generation takes awfully long
dh params should not be generated when user is creating a ca. It takes awfully long. Those are needed on server only and there is AFAIK no security issue if they are large enough (2048 and more) and well known. This issue was solved a long time ago by dhparam package that used shared big dhparams and started generating its own in the background which then replaced the shared one. To avoid blocking openvpn server setup, so people can start using it in few minutes not in half an hour. In foris controller, it should be quite easy to fix, but needs to resurrect dhparams package.
Caused by !4 (merged) and turris/os/packages!606 (merged), so assigning @kkoci