Bump up SSL cert generation strength
This commit is contained in:
parent
2f35248278
commit
3cfbe05aff
|
@ -4,10 +4,10 @@ exec_prefix="@exec_prefix@"
|
|||
sysconfdir="@sysconfdir@"
|
||||
|
||||
echo "Generating self-signed certificate .. "
|
||||
openssl req -x509 -nodes -newkey rsa:1024 -keyout "${sysconfdir}"/ssl.key -out "${sysconfdir}"/ssl.cert
|
||||
openssl req -x509 -nodes -newkey rsa:2048 -keyout "${sysconfdir}"/ssl.key -out "${sysconfdir}"/ssl.cert
|
||||
|
||||
echo "Generating Diffie-Hellman file for secure SSL/TLS negotiation .. "
|
||||
openssl dhparam -out "${sysconfdir}"/dh.pem 1024
|
||||
openssl dhparam -out "${sysconfdir}"/dh.pem 2048
|
||||
|
||||
# If sysconfdir is relative to prefix, make the path relative. I.e.,
|
||||
# prefix=/usr and sysconfdir=/etc -> relative_sysconfdir=/etc,
|
||||
|
|
Loading…
Reference in New Issue