| 1 |
From 41df9ae215cee9574e17e6f887c96a7c97d588f5 Mon Sep 17 00:00:00 2001 |
| 2 |
From: Tomas Mraz <tmraz@fedoraproject.org> |
| 3 |
Date: Thu, 24 Sep 2020 09:03:40 +0200 |
| 4 |
Subject: Use more general default values in openssl.cnf |
| 5 |
|
| 6 |
Also set sha256 as default hash, although that should not be |
| 7 |
necessary anymore. |
| 8 |
|
| 9 |
(was openssl-1.1.1-defaults.patch) |
| 10 |
--- |
| 11 |
apps/openssl.cnf | 12 +++++++----- |
| 12 |
1 file changed, 7 insertions(+), 5 deletions(-) |
| 13 |
|
| 14 |
diff --git a/apps/openssl.cnf b/apps/openssl.cnf |
| 15 |
index 97567a67be..eb25a0ac48 100644 |
| 16 |
--- a/apps/openssl.cnf |
| 17 |
+++ b/apps/openssl.cnf |
| 18 |
@@ -104,7 +104,7 @@ cert_opt = ca_default # Certificate field options |
| 19 |
|
| 20 |
default_days = 365 # how long to certify for |
| 21 |
default_crl_days= 30 # how long before next CRL |
| 22 |
-default_md = default # use public key default MD |
| 23 |
+default_md = sha256 # use SHA-256 by default |
| 24 |
preserve = no # keep passed DN ordering |
| 25 |
|
| 26 |
# A few difference way of specifying how similar the request should look |
| 27 |
@@ -136,6 +136,7 @@ emailAddress = optional |
| 28 |
#################################################################### |
| 29 |
[ req ] |
| 30 |
default_bits = 2048 |
| 31 |
+default_md = sha256 |
| 32 |
default_keyfile = privkey.pem |
| 33 |
distinguished_name = req_distinguished_name |
| 34 |
attributes = req_attributes |
| 35 |
@@ -158,17 +159,18 @@ string_mask = utf8only |
| 36 |
|
| 37 |
[ req_distinguished_name ] |
| 38 |
countryName = Country Name (2 letter code) |
| 39 |
-countryName_default = AU |
| 40 |
+countryName_default = XX |
| 41 |
countryName_min = 2 |
| 42 |
countryName_max = 2 |
| 43 |
|
| 44 |
stateOrProvinceName = State or Province Name (full name) |
| 45 |
-stateOrProvinceName_default = Some-State |
| 46 |
+#stateOrProvinceName_default = Default Province |
| 47 |
|
| 48 |
localityName = Locality Name (eg, city) |
| 49 |
+localityName_default = Default City |
| 50 |
|
| 51 |
0.organizationName = Organization Name (eg, company) |
| 52 |
-0.organizationName_default = Internet Widgits Pty Ltd |
| 53 |
+0.organizationName_default = Default Company Ltd |
| 54 |
|
| 55 |
# we can do this but it is not needed normally :-) |
| 56 |
#1.organizationName = Second Organization Name (eg, company) |
| 57 |
@@ -177,7 +179,7 @@ localityName = Locality Name (eg, city) |
| 58 |
organizationalUnitName = Organizational Unit Name (eg, section) |
| 59 |
#organizationalUnitName_default = |
| 60 |
|
| 61 |
-commonName = Common Name (e.g. server FQDN or YOUR name) |
| 62 |
+commonName = Common Name (eg, your name or your server\'s hostname) |
| 63 |
commonName_max = 64 |
| 64 |
|
| 65 |
emailAddress = Email Address |
| 66 |
-- |
| 67 |
2.26.2 |
| 68 |
|
Parent Directory
| 
Revision Log
| 
Revision Graph
