httpscert: Increase size of the RSA key to 4096.

RSA keys with length of 1024 bits are considered weak.
This commit is contained in:
Michael Tremer
2013-12-12 21:18:56 +01:00
parent a1365ee37c
commit 325aa1e1f4

View File

@@ -8,7 +8,7 @@ case "$1" in
new)
if [ ! -f /etc/httpd/server.key ]; then
echo "Generating https server key."
/usr/bin/openssl genrsa -out /etc/httpd/server.key 1024
/usr/bin/openssl genrsa -out /etc/httpd/server.key 4096
fi
echo "Generating CSR"
/bin/cat /etc/certparams | sed "s/HOSTNAME/`hostname -f`/" | /usr/bin/openssl \