From 070f7359b59d153e77a19b987eec79322076bbce Mon Sep 17 00:00:00 2001 From: David Dunlap Date: Thu, 16 Jul 2020 13:47:42 +0000 Subject: create-user-key-store.sh: replace weak des3 encryption with aes256 Replace weak des3 encryption with more secure algorithm aes256 to generate ima key in script create-user-key-store.sh. Signed-off-by: David Dunlap Signed-off-by: Kai Kang --- meta-signing-key/scripts/create-user-key-store.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'meta-signing-key/scripts/create-user-key-store.sh') diff --git a/meta-signing-key/scripts/create-user-key-store.sh b/meta-signing-key/scripts/create-user-key-store.sh index a63f50e..30e3c28 100755 --- a/meta-signing-key/scripts/create-user-key-store.sh +++ b/meta-signing-key/scripts/create-user-key-store.sh @@ -189,7 +189,7 @@ ca_sign() { else # Prompt user to type the password if [ "$IMA_PASS" = "" ] ; then - openssl genrsa -des3 -out "$key_dir/$key_name.key" 2048 \ + openssl genrsa -aes256 -out "$key_dir/$key_name.key" 2048 \ || print_fatal "openssl failure" openssl req -new -sha256 \ @@ -198,7 +198,7 @@ ca_sign() { -out "$key_dir/$key_name.csr" \ || print_fatal "openssl failure" else - openssl genrsa -des3 -passout "pass:$IMA_PASS" \ + openssl genrsa -aes256 -passout "pass:$IMA_PASS" \ -out "$key_dir/$key_name.key" 2048 \ || print_fatal "openssl failure" -- cgit v1.2.3-54-g00ecf