diff options
| author | sthen <> | 2014-10-01 13:15:40 +0000 |
|---|---|---|
| committer | sthen <> | 2014-10-01 13:15:40 +0000 |
| commit | 5c5b544c2aae06ec114cfeaf631cd09a331ce9ea (patch) | |
| tree | 67663f7db6cba735d8fc6ce3333a938521b78ff7 /src/lib | |
| parent | 4196588ba36e0ba5fa0fcb814fd943e5e3e60b62 (diff) | |
| download | openbsd-5c5b544c2aae06ec114cfeaf631cd09a331ce9ea.tar.gz openbsd-5c5b544c2aae06ec114cfeaf631cd09a331ce9ea.tar.bz2 openbsd-5c5b544c2aae06ec114cfeaf631cd09a331ce9ea.zip | |
Switch "openssl req" to using SHA256 for hashes and AES256 to encrypt on-disk
keys by default (instead of SHA1/3DES) and update documentation to match.
Another way to do this is s/NID_sha1/NID_sha256/ in src/crypto/rsa/rsa_ameth.c
("case ASN1_PKEY_CTRL_DEFAULT_MD_NID") but going with the more targetted method
above that only affects "openssl req" for now.
Help/OK jsing@. OKs on earlier diffs changing openssl.cnf from phessler@ aja@
Diffstat (limited to 'src/lib')
0 files changed, 0 insertions, 0 deletions