| 1 |
jpp |
1.1 |
From 41df9ae215cee9574e17e6f887c96a7c97d588f5 Mon Sep 17 00:00:00 2001 |
| 2 |
|
|
From: Tomas Mraz <tmraz@fedoraproject.org> |
| 3 |
|
|
Date: Thu, 24 Sep 2020 09:03:40 +0200 |
| 4 |
|
|
Subject: Use more general default values in openssl.cnf |
| 5 |
|
|
|
| 6 |
|
|
Also set sha256 as default hash, although that should not be |
| 7 |
|
|
necessary anymore. |
| 8 |
|
|
|
| 9 |
|
|
(was openssl-1.1.1-defaults.patch) |
| 10 |
|
|
--- |
| 11 |
|
|
apps/openssl.cnf | 12 +++++++----- |
| 12 |
|
|
1 file changed, 7 insertions(+), 5 deletions(-) |
| 13 |
|
|
|
| 14 |
|
|
diff --git a/apps/openssl.cnf b/apps/openssl.cnf |
| 15 |
|
|
index 97567a67be..eb25a0ac48 100644 |
| 16 |
|
|
--- a/apps/openssl.cnf |
| 17 |
|
|
+++ b/apps/openssl.cnf |
| 18 |
|
|
@@ -104,7 +104,7 @@ cert_opt = ca_default # Certificate field options |
| 19 |
|
|
|
| 20 |
|
|
default_days = 365 # how long to certify for |
| 21 |
|
|
default_crl_days= 30 # how long before next CRL |
| 22 |
|
|
-default_md = default # use public key default MD |
| 23 |
|
|
+default_md = sha256 # use SHA-256 by default |
| 24 |
|
|
preserve = no # keep passed DN ordering |
| 25 |
|
|
|
| 26 |
|
|
# A few difference way of specifying how similar the request should look |
| 27 |
|
|
@@ -136,6 +136,7 @@ emailAddress = optional |
| 28 |
|
|
#################################################################### |
| 29 |
|
|
[ req ] |
| 30 |
|
|
default_bits = 2048 |
| 31 |
|
|
+default_md = sha256 |
| 32 |
|
|
default_keyfile = privkey.pem |
| 33 |
|
|
distinguished_name = req_distinguished_name |
| 34 |
|
|
attributes = req_attributes |
| 35 |
|
|
@@ -158,17 +159,18 @@ string_mask = utf8only |
| 36 |
|
|
|
| 37 |
|
|
[ req_distinguished_name ] |
| 38 |
|
|
countryName = Country Name (2 letter code) |
| 39 |
|
|
-countryName_default = AU |
| 40 |
|
|
+countryName_default = XX |
| 41 |
|
|
countryName_min = 2 |
| 42 |
|
|
countryName_max = 2 |
| 43 |
|
|
|
| 44 |
|
|
stateOrProvinceName = State or Province Name (full name) |
| 45 |
|
|
-stateOrProvinceName_default = Some-State |
| 46 |
|
|
+#stateOrProvinceName_default = Default Province |
| 47 |
|
|
|
| 48 |
|
|
localityName = Locality Name (eg, city) |
| 49 |
|
|
+localityName_default = Default City |
| 50 |
|
|
|
| 51 |
|
|
0.organizationName = Organization Name (eg, company) |
| 52 |
|
|
-0.organizationName_default = Internet Widgits Pty Ltd |
| 53 |
|
|
+0.organizationName_default = Default Company Ltd |
| 54 |
|
|
|
| 55 |
|
|
# we can do this but it is not needed normally :-) |
| 56 |
|
|
#1.organizationName = Second Organization Name (eg, company) |
| 57 |
|
|
@@ -177,7 +179,7 @@ localityName = Locality Name (eg, city) |
| 58 |
|
|
organizationalUnitName = Organizational Unit Name (eg, section) |
| 59 |
|
|
#organizationalUnitName_default = |
| 60 |
|
|
|
| 61 |
|
|
-commonName = Common Name (e.g. server FQDN or YOUR name) |
| 62 |
|
|
+commonName = Common Name (eg, your name or your server\'s hostname) |
| 63 |
|
|
commonName_max = 64 |
| 64 |
|
|
|
| 65 |
|
|
emailAddress = Email Address |
| 66 |
|
|
-- |
| 67 |
|
|
2.26.2 |
| 68 |
|
|
|
Parent Directory
| 
Revision Log
| 
Revision Graph
