rpms
/
crypto-utils
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

keyutil: use SHA1 as default hash in created certs (#921117) 

- genkey: default to 2048 bit keysize (#986788)
Resolves: rhbz#986788
Resolves: rhbz#921117
This commit is contained in:
Joe Orton 2014-01-22 14:32:59 +00:00
parent 6eaa0f5aa3
commit 900400f9a8
3 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
crypto-utils.spec
View File

@ -4,7 +4,7 @@
Summary: SSL certificate and key management utilities
Name: crypto-utils
Version: 2.4.1
Release: 44%{?dist}
Release: 45%{?dist}
Group: Applications/System
# certwatch.c is GPLv2
# pemutil.c etc are (MPLv1.1+ or GPLv2+ or LPGLv2+)
@ -135,6 +135,10 @@ chmod -R u+w $RPM_BUILD_ROOT
%{perl_vendorarch}/auto/Crypt
%changelog
* Wed Jan 22 2014 Joe Orton <jorton@redhat.com> - 2.4.1-45
- keyutil: use SHA1 as default hash in created certs (#921117)
- genkey: default to 2048 bit keysize (#986788)
* Fri Aug 9 2013 Joe Orton <jorton@redhat.com> - 2.4.1-44
- fix License, fix debuginfo generation (#915705)

6
genkey.pl
View File

@ -526,8 +526,8 @@ EOT
my $listbox = Newt::Listbox(5, 0);
my $text = Newt::Textbox(70, 6, 0, $title);
my @listitems = ("512 (insecure)",
"1024 (medium-grade, fast speed) [RECOMMENDED]",
"2048 (high-security, medium speed)",
"1024 (medium-grade, fast speed)",
"2048 (high-security, medium speed) [RECOMMENDED]",
"4096 (paranoid-security, tortoise speed)",
"Choose your own");
@ -537,7 +537,7 @@ EOT
$panel->Add(0, 1, $listbox, 0, 0, 1);
$panel->Add(0, 2, NextBackCancelButton());
Newt::newtListboxSetCurrent($listbox->{co}, 1);
Newt::newtListboxSetCurrent($listbox->{co}, 2);
$panel->Draw();

2
keyutil.c
View File

@ -1522,7 +1522,7 @@ static int keyutil_main(
keyutil_extns[ext_policyConstr] = PR_FALSE;
keyutil_extns[ext_inhibitAnyPolicy] = PR_FALSE;
hashAlgTag = SEC_OID_MD5;
hashAlgTag = SEC_OID_SHA1;
/* Make a cert request */
rv = CertReq(privkey, pubkey, rsaKey, hashAlgTag, subject,