rpms/freeradius
7
0
Fork 0
Code Issues Pull Requests Releases Activity
b7cc6d96e8
freeradius/freeradius-cert-config.patch

62 lines
2.2 KiB
Diff
Raw Normal View History

Upgrade to latest upstream release: 2.1.11
2011-06-22 16:08:01 +00:00
diff -u -r freeradius-server-2.1.11.orig/raddb/certs/ca.cnf freeradius-server-2.1.11/raddb/certs/ca.cnf
--- freeradius-server-2.1.11.orig/raddb/certs/ca.cnf 2011-06-20 10:57:14.000000000 -0400
+++ freeradius-server-2.1.11/raddb/certs/ca.cnf 2011-06-21 18:42:02.000000000 -0400
- resolves: bug #526559 initial install should run bootstrap to create certificates running radiusd in debug mode to generate inital temporary certificates is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
2010-01-08 17:55:23 +00:00
@@ -14,9 +14,9 @@
RANDFILE = $dir/.rand
name_opt = ca_default
cert_opt = ca_default
-default_days = 365
+default_days = 60
default_crl_days = 30
-default_md = md5
+default_md = sha1
preserve = no
policy = policy_match
Upgrade to latest upstream release: 2.1.11
2011-06-22 16:08:01 +00:00
diff -u -r freeradius-server-2.1.11.orig/raddb/certs/client.cnf freeradius-server-2.1.11/raddb/certs/client.cnf
--- freeradius-server-2.1.11.orig/raddb/certs/client.cnf 2011-06-20 10:57:14.000000000 -0400
+++ freeradius-server-2.1.11/raddb/certs/client.cnf 2011-06-21 18:42:02.000000000 -0400
- resolves: bug #526559 initial install should run bootstrap to create certificates running radiusd in debug mode to generate inital temporary certificates is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
2010-01-08 17:55:23 +00:00
@@ -14,9 +14,9 @@
RANDFILE = $dir/.rand
name_opt = ca_default
cert_opt = ca_default
-default_days = 365
+default_days = 60
default_crl_days = 30
-default_md = md5
+default_md = sha1
preserve = no
policy = policy_match
Upgrade to latest upstream release: 2.1.11
2011-06-22 16:08:01 +00:00
diff -u -r freeradius-server-2.1.11.orig/raddb/certs/server.cnf freeradius-server-2.1.11/raddb/certs/server.cnf
--- freeradius-server-2.1.11.orig/raddb/certs/server.cnf 2011-06-20 10:57:14.000000000 -0400
+++ freeradius-server-2.1.11/raddb/certs/server.cnf 2011-06-21 18:42:02.000000000 -0400
- resolves: bug #526559 initial install should run bootstrap to create certificates running radiusd in debug mode to generate inital temporary certificates is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
2010-01-08 17:55:23 +00:00
@@ -14,9 +14,9 @@
RANDFILE = $dir/.rand
name_opt = ca_default
cert_opt = ca_default
-default_days = 365
+default_days = 60
default_crl_days = 30
-default_md = md5
+default_md = sha1
preserve = no
policy = policy_match
Upgrade to latest upstream release: 2.1.11
2011-06-22 16:08:01 +00:00
diff -u -r freeradius-server-2.1.11.orig/raddb/eap.conf freeradius-server-2.1.11/raddb/eap.conf
--- freeradius-server-2.1.11.orig/raddb/eap.conf 2011-06-20 10:57:14.000000000 -0400
+++ freeradius-server-2.1.11/raddb/eap.conf 2011-06-22 10:40:42.000000000 -0400
@@ -281,7 +281,11 @@
# for the server to print out an error message,
# and refuse to start.
- resolves: bug #526559 initial install should run bootstrap to create certificates running radiusd in debug mode to generate inital temporary certificates is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
2010-01-08 17:55:23 +00:00
#
- make_cert_command = "${certdir}/bootstrap"
Upgrade to latest upstream release: 2.1.11
2011-06-22 16:08:01 +00:00
+ # Redhat RPM's run the bootstrap certificate creation
+ # as part of the RPM install (not upgrade), therefore
+ # the make_cert_command is commented out.
+ #
+ #make_cert_command = "${certdir}/bootstrap"
- resolves: bug #526559 initial install should run bootstrap to create certificates running radiusd in debug mode to generate inital temporary certificates is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
2010-01-08 17:55:23 +00:00
#
Upgrade to latest upstream release: 2.1.11
2011-06-22 16:08:01 +00:00
# Session resumption / fast reauthentication
Reference in New Issue Copy Permalink