HCoop
/
hcoop
/
domtool2.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(from parent 1:
5511dd2
)
boostrap: update domtool CA to use sha256
author
Clinton Ebadi
<clinton@unknownlamer.org>
Sat, 30 Jan 2021 21:24:40 +0000
(16:24 -0500)
committer
Clinton Ebadi
<clinton@unknownlamer.org>
Sat, 30 Jan 2021 21:24:40 +0000
(16:24 -0500)
sha1 public certs can no longer be loaded on Debian 10 and later
bootstrap/common.ssl.conf
patch
|
blob
|
blame
|
history
diff --git
a/bootstrap/common.ssl.conf
b/bootstrap/common.ssl.conf
index
c2c0ddb
..
40e234c
100644
(file)
--- a/
bootstrap/common.ssl.conf
+++ b/
bootstrap/common.ssl.conf
@@
-36,7
+36,7
@@
crl_extensions = crl_ext
default_days = 365
default_crl_days= 30
-default_md = sha
1
+default_md = sha
256
preserve = no
policy = policy_domtool
@@
-55,7
+55,7
@@
emailAddress = supplied
[ req ]
default_bits = 4096
default_keyfile = ${Domtool_Defaults::ca_dir}/private/ca-key.pem
-default_md = sha
1
+default_md = sha
256
prompt = no
distinguished_name = root_ca_distinguished_name