rpm/apache2
SHA256
1
0
Fork 0
forked from pool/apache2
Code Pull Requests Activity

Accepting request 185675 from Apache

Browse Source 
- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations. (forwarded request 185577 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/185675
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache2?expand=0&rev=71
This commit is contained in:
Stephan Kulow 2013-08-04 14:48:07 +00:00 committed by Git OBS Bridge
commit 54726bcd73
2 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
apache2.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Fri Aug 2 08:18:03 UTC 2013 - meissner@suse.com
- Make the default keysize in the sample gensslcerts 2048 bits to match
government recommendations.
------------------------------------------------------------------- -------------------------------------------------------------------
Thu Aug 1 02:06:38 UTC 2013 - crrodriguez@opensuse.org Thu Aug 1 02:06:38 UTC 2013 - crrodriguez@opensuse.org

6
gensslcert
View File

@ -95,7 +95,7 @@ echo;myecho creating CA key ...
cat >$r/root/.mkcert.cfg <<EOT cat >$r/root/.mkcert.cfg <<EOT
[ req ] [ req ]
default_bits = 1024 default_bits = 2048
default_keyfile = keyfile.pem default_keyfile = keyfile.pem
distinguished_name = req_distinguished_name distinguished_name = req_distinguished_name
attributes = req_attributes attributes = req_attributes
@ -124,11 +124,11 @@ cp -pv $sslcrtdir/${name}ca.crt $r/srv/www/htdocs/$(echo $name | tr 'a-z' 'A-Z')
# Server CERT # Server CERT
# #
echo;myecho creating server key ... echo;myecho creating server key ...
(umask 0377 ; $openssl genrsa -rand $r/etc/rc.config:$r/var/log/messages -out $sslkeydir/${name}server.key 1024 || myexit $LINENO $?) (umask 0377 ; $openssl genrsa -rand $r/etc/rc.config:$r/var/log/messages -out $sslkeydir/${name}server.key 2048 || myexit $LINENO $?)
cat >$r/root/.mkcert.cfg <<EOT cat >$r/root/.mkcert.cfg <<EOT
[ req ] [ req ]
default_bits = 1024 default_bits = 2048
default_keyfile = keyfile.pem default_keyfile = keyfile.pem
distinguished_name = req_distinguished_name distinguished_name = req_distinguished_name
attributes = req_attributes attributes = req_attributes