Merge pull request #8964 from MikhailKasimov/patch-2
man: systemd-journal-upload: rsa 2048
This commit is contained in:
@@ -228,7 +228,8 @@
|
||||
legitimate, and vice versa, that the client is trusted.</para>
|
||||
|
||||
<para>A suitable set of certificates can be generated with
|
||||
<command>openssl</command>:</para>
|
||||
<command>openssl</command>. Note, 2048 bits of key length
|
||||
is minimally recommended to use for security reasons:</para>
|
||||
|
||||
<programlisting>openssl req -newkey rsa:2048 -days 3650 -x509 -nodes \
|
||||
-out ca.pem -keyout ca.key -subj '/CN=Certificate authority/'
|
||||
@@ -263,10 +264,10 @@ echo 0001 >serial
|
||||
SERVER=server
|
||||
CLIENT=client
|
||||
|
||||
openssl req -newkey rsa:1024 -nodes -out $SERVER.csr -keyout $SERVER.key -subj "/CN=$SERVER/"
|
||||
openssl req -newkey rsa:2048 -nodes -out $SERVER.csr -keyout $SERVER.key -subj "/CN=$SERVER/"
|
||||
openssl ca -batch -config ca.conf -notext -in $SERVER.csr -out $SERVER.pem
|
||||
|
||||
openssl req -newkey rsa:1024 -nodes -out $CLIENT.csr -keyout $CLIENT.key -subj "/CN=$CLIENT/"
|
||||
openssl req -newkey rsa:2048 -nodes -out $CLIENT.csr -keyout $CLIENT.key -subj "/CN=$CLIENT/"
|
||||
openssl ca -batch -config ca.conf -notext -in $CLIENT.csr -out $CLIENT.pem
|
||||
</programlisting>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user