Mon May 17 15:38:55 2021 UTC ()
Adapt outdated defaults to recent openssl versions


(martin)
diff -r1.2 -r1.3 pkgsrc/pkgtools/pkg_install/files/x509/pkgsrc.cnf
cvs diff -r1.2 -r1.3 pkgsrc/pkgtools/pkg_install/files/x509/pkgsrc.cnf (expand / switch to unified diff)

--- pkgsrc/pkgtools/pkg_install/files/x509/pkgsrc.cnf 2009/02/02 12:49:16 1.2
+++ pkgsrc/pkgtools/pkg_install/files/x509/pkgsrc.cnf 2021/05/17 15:38:55 1.3
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1# $NetBSD: pkgsrc.cnf,v 1.2 2009/02/02 12:49:16 joerg Exp $ 1# $NetBSD: pkgsrc.cnf,v 1.3 2021/05/17 15:38:55 martin Exp $
2# 2#
3# OpenSSL sample configuration file for use by pkgsrc.sh 3# OpenSSL sample configuration file for use by pkgsrc.sh
4# 4#
5 5
6# This definition stops the following lines choking if HOME isn't 6# This definition stops the following lines choking if HOME isn't
7# defined. 7# defined.
8HOME = . 8HOME = .
9RANDFILE = $ENV::HOME/.rnd 9RANDFILE = $ENV::HOME/.rnd
10 10
11#################################################################### 11####################################################################
12[ ca ] 12[ ca ]
13default_ca = CA_default # The default ca section 13default_ca = CA_default # The default ca section
14 14
@@ -67,29 +67,28 @@ emailAddress = optional @@ -67,29 +67,28 @@ emailAddress = optional
67# At this point in time, you must list all acceptable 'object' 67# At this point in time, you must list all acceptable 'object'
68# types. 68# types.
69[ policy_anything ] 69[ policy_anything ]
70countryName = optional 70countryName = optional
71stateOrProvinceName = optional 71stateOrProvinceName = optional
72localityName = optional 72localityName = optional
73organizationName = optional 73organizationName = optional
74organizationalUnitName = optional 74organizationalUnitName = optional
75commonName = supplied 75commonName = supplied
76emailAddress = optional 76emailAddress = optional
77 77
78#################################################################### 78####################################################################
79[ req ] 79[ req ]
80default_bits = 2048 80default_bits = 4096
81default_keyfile = privkey.pem 81default_keyfile = privkey.pem
82default_md = sha1 
83distinguished_name = req_distinguished_name 82distinguished_name = req_distinguished_name
84x509_extensions = v3_ca # The extentions to add to the self signed cert 83x509_extensions = v3_ca # The extentions to add to the self signed cert
85 84
86string_mask = utf8only 85string_mask = utf8only
87 86
88[ req_distinguished_name ] 87[ req_distinguished_name ]
89countryName = Country Name (2 letter code) 88countryName = Country Name (2 letter code)
90countryName_default = AU 89countryName_default = AU
91countryName_min = 2 90countryName_min = 2
92countryName_max = 2 91countryName_max = 2
93 92
94stateOrProvinceName = State or Province Name (full name) 93stateOrProvinceName = State or Province Name (full name)
95stateOrProvinceName_default = Some-State 94stateOrProvinceName_default = Some-State