summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndreas Metzler <ametzler@downhill.at.eu.org>2013-09-30 19:44:45 +0200
committerAndreas Metzler <ametzler@downhill.at.eu.org>2013-09-30 19:44:45 +0200
commit4ba7e08a9dac09c7c973daca3bda86a865d312e5 (patch)
tree93ccb32aa10e10601d7ea084ceba51eefc5bd4fa
parente6bba99a6631c20e17c3652a5418718c9c12dac4 (diff)
downloadexim4-4ba7e08a9dac09c7c973daca3bda86a865d312e5.tar.gz
Generate 2048bit key by default. LP: #1200581
-rw-r--r--debian/changelog6
-rw-r--r--debian/exim-gencert4
2 files changed, 8 insertions, 2 deletions
diff --git a/debian/changelog b/debian/changelog
index 155ea13..7dcd3b0 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+exim4 (4.82~rc1-2) UNRELEASED; urgency=low
+
+ * exim-gencert: Generate 2048bit key by default. LP: #1200581
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 30 Sep 2013 19:42:46 +0200
+
exim4 (4.82~rc1-1) experimental; urgency=low
* New upstream version.
diff --git a/debian/exim-gencert b/debian/exim-gencert
index 24fbe18..894e9da 100644
--- a/debian/exim-gencert
+++ b/debian/exim-gencert
@@ -37,7 +37,7 @@ SSLEAY="$(tempfile -m600 -pexi)"
cat > $SSLEAY <<EOM
RANDFILE = $HOME/.rnd
[ req ]
-default_bits = 1024
+default_bits = 2048
default_keyfile = exim.key
distinguished_name = req_distinguished_name
[ req_distinguished_name ]
@@ -64,7 +64,7 @@ echo " "
echo " Please enter the hostname of your MTA at the Common Name (CN) prompt!"
echo " "
-openssl req -config $SSLEAY -x509 -newkey rsa:1024 -keyout $KEY -out $CERT -days $DAYS -nodes
+openssl req -config $SSLEAY -x509 -newkey rsa:2048 -keyout $KEY -out $CERT -days $DAYS -nodes
#see README.Debian.gz*# openssl dhparam -check -text -5 512 -out $DH
rm -f $SSLEAY