* Thu Sep 30 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.84-12.sme

- Attempt to fix the final reload after CA creation [SME: 11192]
2025-09-11 00:03:08 -04:00
parent 245e1bcd0b
commit a747530268
35 changed files with 3917 additions and 2796 deletions
--- a/root/openssl.cnf
+++ b/root/openssl.cnf
@@ -14,7 +14,7 @@ crl_extensions		= crl_ext
 default_days		= 365
 default_crl_days	= 30
 preserve	 	= no
-default_md	 	= sha1
+default_md	 	= sha256

 [ ca ]
 default_ca		= email_cert
@@ -147,7 +147,7 @@ issuerAltName=issuer:copy
 authorityKeyIdentifier=keyid:always,issuer:always

 [ req ]
-default_bits		= 1024
+default_bits		= 2048
 default_keyfile		= privkey.pem
 distinguished_name	= req_name
 string_mask		= nombstr