comparison ssl.t @ 1488:dbce8fb5f5f8

Tests: align with OpenSSL security level 2. This updates minimum requirements to 2048 bit RSA keys and SHA-2 message digest.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 09 Jul 2019 13:37:55 +0300
parents f9718a0773b9
children c6f27bcdd9d9
comparison
equal deleted inserted replaced
1487:fe0765147e15 1488:dbce8fb5f5f8
149 149
150 EOF 150 EOF
151 151
152 $t->write_file('openssl.conf', <<EOF); 152 $t->write_file('openssl.conf', <<EOF);
153 [ req ] 153 [ req ]
154 default_bits = 1024 154 default_bits = 2048
155 encrypt_key = no 155 encrypt_key = no
156 distinguished_name = req_distinguished_name 156 distinguished_name = req_distinguished_name
157 [ req_distinguished_name ] 157 [ req_distinguished_name ]
158 EOF 158 EOF
159 159
164 default_ca = myca 164 default_ca = myca
165 165
166 [ myca ] 166 [ myca ]
167 new_certs_dir = $d 167 new_certs_dir = $d
168 database = $d/certindex 168 database = $d/certindex
169 default_md = sha1 169 default_md = sha256
170 policy = myca_policy 170 policy = myca_policy
171 serial = $d/certserial 171 serial = $d/certserial
172 default_days = 3 172 default_days = 3
173 173
174 [ myca_policy ] 174 [ myca_policy ]