deprecated/phpki-ng
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Reset default_md to sha256 Move DH2048 code Update min key size

Browse Source
This commit is contained in:
John Crisp
2020-03-06 12:59:13 +01:00
parent b4c1219bd5
commit 2f1a0f1798
2 changed files with 13 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
openssl.cnf
View File

@@ -14,7 +14,7 @@ crl_extensions = crl_ext
default_days = 365 default_days = 365
default_crl_days = 30 default_crl_days = 30
preserve = no preserve = no
default_md = sha512 default_md = sha256
[ ca ] [ ca ]
default_ca = email_cert default_ca = email_cert

21
setup.php-presetup
View File

@@ -351,7 +351,7 @@ crl_extensions = crl_ext
default_days = 365 default_days = 365
default_crl_days= 30 default_crl_days= 30
preserve = no preserve = no
default_md = sha512 default_md = sha256
[ ca ] [ ca ]
default_ca = email_cert default_ca = email_cert
@@ -645,6 +645,14 @@ EOS;
print "Please ignore warnings about \"unable to write 'random state\' <br><br>"; print "Please ignore warnings about \"unable to write 'random state\' <br><br>";
#print '<p><strong>Creating 2048 bit Diffie-Hellman parameters used by OpenVPN.<br>';
#print "Saving to $store_dir/dhparam2048.pem.</strong><br>";
#$cmd = "openssl dhparam -rand '$config[random]' -out '$config[private_dir]/dhparam2048.pem' 2048";
#print $cmd.'<br>';
#flush();
#flush_exec($cmd,200);
# #
# Create a TLS auth key for OpenVPN if openvpn is installed # Create a TLS auth key for OpenVPN if openvpn is installed
# #
@@ -665,12 +673,7 @@ EOS;
echo "openvpn --genkey --secret". $config[private_dir] . "/takey.pem<br>"; echo "openvpn --genkey --secret". $config[private_dir] . "/takey.pem<br>";
} }
#print '<p><strong>Creating 2048 bit Diffie-Hellman parameters used by OpenVPN.<br>';
#print "Saving to $store_dir/dhparam2048.pem.</strong><br>";
#$cmd = "openssl dhparam -rand '$config[random]' -out '$config[private_dir]/dhparam2048.pem' 2048";
#print $cmd.'<br>';
#flush();
#flush_exec($cmd,200);
# #
# Step aside and let the users in (create index.php files). # Step aside and let the users in (create index.php files).
@@ -837,12 +840,12 @@ E-mail: <a href=mailto:someone@somewhere.com>someone@somewhere.com</a>&nbsp;&nbs
<tr> <tr>
<td> <td>
<strong>Key Size</strong> <font color=red>*</font><br> <strong>Key Size</strong> <font color=red>*</font><br>
Enter the size of your certificate key. Enter the size of your certificate key. Recommend 2048+
</td> </td>
<td><select name=keysize> <td><select name=keysize>
<?php <?php
for ( $i = 512 ; $i <= 4096 ; $i+=512 ) { for ( $i = 1024 ; $i <= 4096 ; $i+=512 ) {
print "<option value=$i " . ($keysize == $i ? "selected='selected'" : "") . ">$i bits</option>\n" ; print "<option value=$i " . ($keysize == $i ? "selected='selected'" : "") . ">$i bits</option>\n" ;
} }
?> ?>