diff options
| author | Omar Polo <op@omarpolo.com> | 2023-06-09 20:43:12 +0000 |
|---|---|---|
| committer | Omar Polo <op@omarpolo.com> | 2023-06-09 20:43:12 +0000 |
| commit | 892f3a5cf80f2aa3d5d2745396bf3c52c418c435 (patch) | |
| tree | eb03bd8a4f2e5977a9bb077c6f34f0b3cd787c7d /contrib | |
| parent | 7fff8aa6cb567a62113d9877af5bcb5bb4494111 (diff) | |
gencert: use secp384r1
prime256v1 should be perfectly fine for all I understand, but
OpenBSD' acme-client uses secp384r1 and who am I to disagree :)
Diffstat (limited to 'contrib')
| -rwxr-xr-x | contrib/gencert | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/contrib/gencert b/contrib/gencert index 20ce1de..64dce1f 100755 --- a/contrib/gencert +++ b/contrib/gencert @@ -80,7 +80,7 @@ if [ -f "$pem" -o -f "$key" ]; then fi if [ $ec = yes ]; then - openssl ecparam -name prime256v1 -genkey -noout -out "${key}" && \ + openssl ecparam -name secp384r1 -genkey -noout -out "${key}" && \ openssl req -new -x509 -key "${key}" -out "${pem}" -days "${days}" \ -nodes -subj "/CN=$hostname" else |