24b463bfa9
Change the default_md in openssl.cnf.tmpl to sha384
2019-03-12 17:15:57 +08:00
ec56baf36f
Revise openssl settings for RHEL 8 ( #5967 )
...
* Remove the RANDFILE from openssl.cnf. This is out-of-date in opessl beyond version 1.1.1a.
* Update openssl.cnf.tmpl to the latest one from openssl 1.1.1a source
* Revise openssl.cnf.tmpl based on the latest one from openssl 1.1.1a source
* Remove `-no_ssl2' command line argument for openssl, totally.
2019-01-28 16:35:31 +08:00
255685691a
Remove trailing spaces in file xCAT-server/share/xcat/ca/openssl.cnf.tmpl
2017-12-31 23:59:59 +00:00
dc97e7a5b7
Revert "replace the digest algorithm of xCAT ssl certificate from sha1 to sha256"
2016-05-06 15:47:37 +08:00
e09ef72014
replace the digest algorithm of xCAT ssl certificate from sha1 to sha256
2016-04-14 03:01:10 -04:00
69f5e250a9
modified subjectAltName method, did not use ENV
2016-03-07 07:33:42 -05:00
03769868a4
To fix issue #761 , made a mistake that make certificate generate failed
2016-03-02 02:33:09 -05:00
0d7a0dec61
Set the FQDN in the xcatd certificate, use subjectAltNames
2016-03-01 03:39:41 -05:00
0ee24e839a
Revert "Have openssl req use better message digest"
...
This reverts commit 98bc658385
2014-04-15 09:12:00 -04:00
3ea7bafb9a
Revert "Use sha256 by default in openssl.cnf"
...
This reverts commit e02a913e86
2014-04-15 09:11:47 -04:00
98bc658385
Have openssl req use better message digest
2014-02-11 10:07:30 -05:00
e02a913e86
Use sha256 by default in openssl.cnf
2014-01-07 14:18:53 -05:00
6f21c19ba0
Fix openssl template for 'server' to also allowed to be a 'client' to restore hierarchy
...
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@16006 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2013-04-17 13:53:38 +00:00
9a76937088
Add keyEncipherment to keyUsage since Java expects it
...
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@14964 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2013-01-23 15:02:32 +00:00
9c023486d9
Fix some mistakes in the SSL certificate tweaks
...
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@14919 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2013-01-18 14:31:13 +00:00
f740315ef2
Have keyUsage and extendedkeyusage set for user/server certficates as is befitting each role
...
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@14876 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2013-01-14 16:40:51 +00:00
92508cf564
Tweak SSL setup scripts to have a CA more convenient for server and client scripts
...
Sign server, ca, and client certificate with more unique attributes delineating roles
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@14875 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2013-01-14 16:40:39 +00:00
e68fe9d2db
-Move xCAT-server and client to not have 2.0 in name for trunk
...
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@1561 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
2008-06-03 14:56:33 +00:00
