cadey
/
elemental-ircd
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Bump up SSL cert generation strength

This commit is contained in:
Sam Dodrill 2014-01-01 04:03:45 -08:00
parent 2f35248278
commit 3cfbe05aff
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tools/genssl.sh.in
View File

@ -4,10 +4,10 @@ exec_prefix="@exec_prefix@"
sysconfdir="@sysconfdir@" sysconfdir="@sysconfdir@"
echo "Generating self-signed certificate .. " echo "Generating self-signed certificate .. "
openssl req -x509 -nodes -newkey rsa:1024 -keyout "${sysconfdir}"/ssl.key -out "${sysconfdir}"/ssl.cert openssl req -x509 -nodes -newkey rsa:2048 -keyout "${sysconfdir}"/ssl.key -out "${sysconfdir}"/ssl.cert
echo "Generating Diffie-Hellman file for secure SSL/TLS negotiation .. " echo "Generating Diffie-Hellman file for secure SSL/TLS negotiation .. "
openssl dhparam -out "${sysconfdir}"/dh.pem 1024 openssl dhparam -out "${sysconfdir}"/dh.pem 2048
# If sysconfdir is relative to prefix, make the path relative. I.e., # If sysconfdir is relative to prefix, make the path relative. I.e.,
# prefix=/usr and sysconfdir=/etc -> relative_sysconfdir=/etc, # prefix=/usr and sysconfdir=/etc -> relative_sysconfdir=/etc,