Increased cryptographic strength

2012-02-28 08:49:14 +00:00
parent a0a31f6e8c
commit f8a55ea9fb
2 changed files with 19 additions and 3 deletions
--- a/openssl.cnf
+++ b/openssl.cnf
@@ -14,7 +14,7 @@ crl_extensions		= crl_ext
 default_days		= 365
 default_crl_days	= 30
 preserve	 	= no
-default_md	 	= md5
+default_md	 	= sha512

 [ ca ]
 default_ca		= email_cert
@@ -147,7 +147,7 @@ issuerAltName=issuer:copy
 authorityKeyIdentifier=keyid:always,issuer:always

 [ req ]
-default_bits		= 1024
+default_bits		= 2048
 default_keyfile		= privkey.pem
 distinguished_name	= req_name
 string_mask		= nombstr