diff options
author | Andreas Metzler <ametzler@downhill.at.eu.org> | 2013-09-30 19:44:45 +0200 |
---|---|---|
committer | Andreas Metzler <ametzler@downhill.at.eu.org> | 2013-09-30 19:44:45 +0200 |
commit | 4ba7e08a9dac09c7c973daca3bda86a865d312e5 (patch) | |
tree | 93ccb32aa10e10601d7ea084ceba51eefc5bd4fa | |
parent | e6bba99a6631c20e17c3652a5418718c9c12dac4 (diff) | |
download | exim4-4ba7e08a9dac09c7c973daca3bda86a865d312e5.tar.gz |
Generate 2048bit key by default. LP: #1200581
-rw-r--r-- | debian/changelog | 6 | ||||
-rw-r--r-- | debian/exim-gencert | 4 |
2 files changed, 8 insertions, 2 deletions
diff --git a/debian/changelog b/debian/changelog index 155ea13..7dcd3b0 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +exim4 (4.82~rc1-2) UNRELEASED; urgency=low + + * exim-gencert: Generate 2048bit key by default. LP: #1200581 + + -- Andreas Metzler <ametzler@debian.org> Mon, 30 Sep 2013 19:42:46 +0200 + exim4 (4.82~rc1-1) experimental; urgency=low * New upstream version. diff --git a/debian/exim-gencert b/debian/exim-gencert index 24fbe18..894e9da 100644 --- a/debian/exim-gencert +++ b/debian/exim-gencert @@ -37,7 +37,7 @@ SSLEAY="$(tempfile -m600 -pexi)" cat > $SSLEAY <<EOM RANDFILE = $HOME/.rnd [ req ] -default_bits = 1024 +default_bits = 2048 default_keyfile = exim.key distinguished_name = req_distinguished_name [ req_distinguished_name ] @@ -64,7 +64,7 @@ echo " " echo " Please enter the hostname of your MTA at the Common Name (CN) prompt!" echo " " -openssl req -config $SSLEAY -x509 -newkey rsa:1024 -keyout $KEY -out $CERT -days $DAYS -nodes +openssl req -config $SSLEAY -x509 -newkey rsa:2048 -keyout $KEY -out $CERT -days $DAYS -nodes #see README.Debian.gz*# openssl dhparam -check -text -5 512 -out $DH rm -f $SSLEAY |