Commit 6d80f556 authored by tbrehm's avatar tbrehm
Browse files

Changed default for ssl encryption from 1024 tp 2048 bit.

parent 529ae7a0
...@@ -106,7 +106,7 @@ class apache2_plugin { ...@@ -106,7 +106,7 @@ class apache2_plugin {
$ssl_cnf = " RANDFILE = $rand_file $ssl_cnf = " RANDFILE = $rand_file
[ req ] [ req ]
default_bits = 1024 default_bits = 2048
default_keyfile = keyfile.pem default_keyfile = keyfile.pem
distinguished_name = req_distinguished_name distinguished_name = req_distinguished_name
attributes = req_attributes attributes = req_attributes
...@@ -137,7 +137,7 @@ class apache2_plugin { ...@@ -137,7 +137,7 @@ class apache2_plugin {
$crt_file = escapeshellcmd($crt_file); $crt_file = escapeshellcmd($crt_file);
if(is_file($ssl_cnf_file)){ if(is_file($ssl_cnf_file)){
exec("openssl genrsa -des3 -rand $rand_file -passout pass:$ssl_password -out $key_file 1024 && openssl req -new -passin pass:$ssl_password -passout pass:$ssl_password -key $key_file -out $csr_file -days $ssl_days -config $config_file && openssl req -x509 -passin pass:$ssl_password -passout pass:$ssl_password -key $key_file -in $csr_file -out $crt_file -days $ssl_days -config $config_file && openssl rsa -passin pass:$ssl_password -in $key_file -out $key_file2"); exec("openssl genrsa -des3 -rand $rand_file -passout pass:$ssl_password -out $key_file 2048 && openssl req -new -passin pass:$ssl_password -passout pass:$ssl_password -key $key_file -out $csr_file -days $ssl_days -config $config_file && openssl req -x509 -passin pass:$ssl_password -passout pass:$ssl_password -key $key_file -in $csr_file -out $crt_file -days $ssl_days -config $config_file && openssl rsa -passin pass:$ssl_password -in $key_file -out $key_file2");
$app->log("Creating SSL Cert for: $domain",LOGLEVEL_DEBUG); $app->log("Creating SSL Cert for: $domain",LOGLEVEL_DEBUG);
} }
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment