Skip to content

Use stronger certs to prevent browsers from whining #572

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Sep 5, 2016

Conversation

SpaceK33z
Copy link
Member

@SpaceK33z SpaceK33z commented Aug 27, 2016

These certs use SHA-256 instead of SHA-1, which some browsers (especially Firefox) really don’t like.

Generated with:

openssl genrsa -out ca.key 2048
openssl req -x509 -new -nodes -key ca.key -sha256 -days 1024 -out ca.pem
openssl genrsa -out server.key 2048
openssl req -new -key server.key -out server.csr
openssl x509 -req -in server.csr -CA ca.pem -CAkey ca.key -CAcreateserial -out server.crt -days 1825 -sha256

Fixes #299.

These certs use SHA-256 instead of SHA-1, which some browsers (especially Firefox) really don’t like.

Generated with:

```
openssl genrsa -out ca.key 2048
openssl req -x509 -new -nodes -key ca.key -sha256 -days 1024 -out ca.pem
openssl genrsa -out server.key 2048
openssl req -new -key server.key -out server.csr
openssl x509 -req -in server.csr -CA ca.pem -CAkey ca.key -CAcreateserial -out server.crt -days 500 -sha256
```
@SpaceK33z SpaceK33z merged commit 8983d46 into master Sep 5, 2016
@SpaceK33z SpaceK33z deleted the sha256-certs branch September 5, 2016 16:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant