Povecana velicina generiranog kljuca na 2048 bit, manje izmjene.

[apache2-cn.git] / templates / openssl.cnf

diff --git a/templates/openssl.cnf b/templates/openssl.cnf
index 1b49eb2..fe44656 100644 (file)
--- a/templates/openssl.cnf
+++ b/templates/openssl.cnf
@@ -1,10 +1,9 @@
 #
-# custom openssl configuration file
-# based on csr.sh from http://wiki.cacert.org/wiki/VhostTaskForce
+# apache2-cn openssl configuration file
 #
 
 [ req ]
-default_bits            = 1024
+default_bits            = 2048
 default_keyfile         = /var/lib/misc/HOST_privatekey.pem
 distinguished_name      = req_distinguished_name
 prompt                  = no
@@ -13,13 +12,10 @@ string_mask             = nombstr
 req_extensions          = v3_req
 
 [ req_distinguished_name ]
-countryName                     = HR
-#stateOrProvinceName             = 
-#localityName                    = 
-organizationName                = DOMAIN
-#organizationalUnitName          = 
-commonName                      = HOST
-emailAddress                    = WEBMASTER
+countryName             = HR
+organizationName        = DOMAIN
+commonName              = HOST
+emailAddress            = WEBMASTER
 
 [ v3_req ]
 subjectAltName=DNS:HOST,DNS:www.DOMAIN,DNS:mail.DOMAIN,DNS:ldap.DOMAIN,DNS:webmail.DOMAIN