Changeset 2683

Timestamp:

Mar 12, 2015, 4:17:43 AM (9 years ago)

Author:

andersk

Message:

install-howto: Update openssl commands for modern crypto

Just in case someone is looking here when generating a real
certificate for some reason.

File:

• trunk/server/doc/install-howto.sh (modified) (1 diff)

trunk/server/doc/install-howto.sh

@@ -320 +320 @@
 #   - You need a self-signed SSL cert or Apache will refuse to start
 #     or do SSL.  Generate with: (XXX recommended CN?)
-    openssl req -new -x509 -keyout /etc/pki/tls/private/scripts.key -out /etc/pki/tls/certs/scripts-cert.pem -nodes
-    ln -s /etc/pki/tls/private/scripts.key /etc/pki/tls/private/scripts-1024.key
+    openssl req -new -x509 -sha256 -newkey rsa:2048 -keyout /etc/pki/tls/private/scripts.key -out /etc/pki/tls/certs/scripts-cert.pem -nodes
+    ln -s /etc/pki/tls/private/scripts.key /etc/pki/tls/private/scripts-2048.key
 #     Also make the various public keys match up
     openssl rsa -in /etc/pki/tls/private/scripts.key -pubout > /etc/pki/tls/certs/star.scripts.pem