Blame freeradius-cert-config.patch
|
 |
02d757f |
diff -r -u freeradius-server-2.1.12.orig/raddb/certs/ca.cnf freeradius-server-2.1.12/raddb/certs/ca.cnf
|
|
|
02d757f |
--- freeradius-server-2.1.12.orig/raddb/certs/ca.cnf 2011-09-07 06:59:21.000000000 -0400
|
|
|
02d757f |
+++ freeradius-server-2.1.12/raddb/certs/ca.cnf 2011-09-07 10:28:28.000000000 -0400
|
|
|
19b7b49 |
@@ -14,9 +14,9 @@
|
|
|
19b7b49 |
RANDFILE = $dir/.rand
|
|
|
19b7b49 |
name_opt = ca_default
|
|
|
19b7b49 |
cert_opt = ca_default
|
|
|
19b7b49 |
-default_days = 365
|
|
|
19b7b49 |
+default_days = 60
|
|
|
19b7b49 |
default_crl_days = 30
|
|
|
19b7b49 |
-default_md = md5
|
|
|
19b7b49 |
+default_md = sha1
|
|
|
19b7b49 |
preserve = no
|
|
|
19b7b49 |
policy = policy_match
|
|
|
19b7b49 |
|
|
|
02d757f |
diff -r -u freeradius-server-2.1.12.orig/raddb/certs/client.cnf freeradius-server-2.1.12/raddb/certs/client.cnf
|
|
|
02d757f |
--- freeradius-server-2.1.12.orig/raddb/certs/client.cnf 2011-09-07 06:59:21.000000000 -0400
|
|
|
02d757f |
+++ freeradius-server-2.1.12/raddb/certs/client.cnf 2011-09-07 10:28:28.000000000 -0400
|
|
|
19b7b49 |
@@ -14,9 +14,9 @@
|
|
|
19b7b49 |
RANDFILE = $dir/.rand
|
|
|
19b7b49 |
name_opt = ca_default
|
|
|
19b7b49 |
cert_opt = ca_default
|
|
|
19b7b49 |
-default_days = 365
|
|
|
19b7b49 |
+default_days = 60
|
|
|
19b7b49 |
default_crl_days = 30
|
|
|
19b7b49 |
-default_md = md5
|
|
|
19b7b49 |
+default_md = sha1
|
|
|
19b7b49 |
preserve = no
|
|
|
19b7b49 |
policy = policy_match
|
|
|
19b7b49 |
|
|
|
02d757f |
diff -r -u freeradius-server-2.1.12.orig/raddb/certs/server.cnf freeradius-server-2.1.12/raddb/certs/server.cnf
|
|
|
02d757f |
--- freeradius-server-2.1.12.orig/raddb/certs/server.cnf 2011-09-07 06:59:21.000000000 -0400
|
|
|
02d757f |
+++ freeradius-server-2.1.12/raddb/certs/server.cnf 2011-09-07 10:28:28.000000000 -0400
|
|
|
19b7b49 |
@@ -14,9 +14,9 @@
|
|
|
19b7b49 |
RANDFILE = $dir/.rand
|
|
|
19b7b49 |
name_opt = ca_default
|
|
|
19b7b49 |
cert_opt = ca_default
|
|
|
19b7b49 |
-default_days = 365
|
|
|
19b7b49 |
+default_days = 60
|
|
|
19b7b49 |
default_crl_days = 30
|
|
|
19b7b49 |
-default_md = md5
|
|
|
19b7b49 |
+default_md = sha1
|
|
|
19b7b49 |
preserve = no
|
|
|
19b7b49 |
policy = policy_match
|
|
|
19b7b49 |
|
|
|
02d757f |
diff -r -u freeradius-server-2.1.12.orig/raddb/eap.conf freeradius-server-2.1.12/raddb/eap.conf
|
|
|
02d757f |
--- freeradius-server-2.1.12.orig/raddb/eap.conf 2011-09-07 06:59:21.000000000 -0400
|
|
|
02d757f |
+++ freeradius-server-2.1.12/raddb/eap.conf 2011-09-07 10:28:28.000000000 -0400
|
|
|
a1c8a80 |
@@ -281,7 +281,11 @@
|
|
|
a1c8a80 |
# for the server to print out an error message,
|
|
|
a1c8a80 |
# and refuse to start.
|
|
|
19b7b49 |
#
|
|
|
19b7b49 |
- make_cert_command = "${certdir}/bootstrap"
|
|
|
a1c8a80 |
+ # Redhat RPM's run the bootstrap certificate creation
|
|
|
a1c8a80 |
+ # as part of the RPM install (not upgrade), therefore
|
|
|
a1c8a80 |
+ # the make_cert_command is commented out.
|
|
|
a1c8a80 |
+ #
|
|
|
a1c8a80 |
+ #make_cert_command = "${certdir}/bootstrap"
|
|
|
a1c8a80 |
|
|
|
19b7b49 |
#
|
|
|
02d757f |
# Elliptical cryptography configuration
|
|
|
02d757f |
Only in freeradius-server-2.1.12/raddb: eap.conf.orig
|