pakfire: use correct tree on x86_64.

[ipfire-2.x.git] / src / scripts / httpscert

diff --git a/src/scripts/httpscert b/src/scripts/httpscert
index ff48b602e09b23880d92120e9a1c6c7e3a87d116..e20f789ed4d8c2e52a9e8bc43f4c5f5c276e1a1b 100644 (file)
--- a/src/scripts/httpscert
+++ b/src/scripts/httpscert
@@ -8,13 +8,13 @@ case "$1" in
   new)
        if [ ! -f /etc/httpd/server.key ]; then
                echo "Generating https server key."
-               /usr/bin/openssl genrsa -out /etc/httpd/server.key 1024
+               /usr/bin/openssl genrsa -out /etc/httpd/server.key 4096
        fi
        echo "Generating CSR"
        /bin/cat /etc/certparams | sed "s/HOSTNAME/`hostname -f`/" | /usr/bin/openssl \
                req -new -key /etc/httpd/server.key -out /etc/httpd/server.csr
        echo "Signing certificate"
-       /usr/bin/openssl x509 -req -days 999999 -in \
+       /usr/bin/openssl x509 -req -days 999999 -sha256 -in \
                /etc/httpd/server.csr -signkey /etc/httpd/server.key -out \
                /etc/httpd/server.crt
        ;;