wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-04-16 22:27:20 +02:00
Code Issues Projects Releases Wiki Activity

ECDSA fixed

Browse source
This commit is contained in:
Evgeniy Ivanov 2016-07-24 14:44:59 +03:00
parent 2efaf97e58
commit bce63c209c
5 changed files with 8 additions and 5 deletions

3
config.cfg
View file

@ -5,13 +5,12 @@
# secp384r1 # secp384r1
# secp521r1 # secp521r1
easyrsa_dir: /opt/easy-rsa-ipsec easyrsa_dir: /opt/easy-rsa-ipsec
easyrsa_curve: prime256v1
easyrsa_ca_expire: 3650 easyrsa_ca_expire: 3650
easyrsa_cert_expire: 3650 easyrsa_cert_expire: 3650
easyrsa_p12_export_password: vpn easyrsa_p12_export_password: vpn
# if True re-init all existing certificates. Boolean # if True re-init all existing certificates. Boolean
easyrsa_reinit_existent: False easyrsa_reinit_existent: True
# Domain or ip # Domain or ip
server_name: www.ivlis.me server_name: www.ivlis.me

0
configs/.gitinit Normal file
View file

4
templates/easy-rsa.vars.j2
View file

@ -102,11 +102,11 @@ set_var EASYRSA_DN "cn_only"
# * rsa # * rsa
# * ec # * ec
set_var EASYRSA_ALGO rsa set_var EASYRSA_ALGO ec
# Define the named curve, used in ec mode only: # Define the named curve, used in ec mode only:
set_var EASYRSA_CURVE {{ easyrsa_curve }} set_var EASYRSA_CURVE prime256v1
# In how many days should the root CA key expire? # In how many days should the root CA key expire?

2
templates/ipsec.secrets.j2
View file

@ -1,2 +1,2 @@
: RSA {{ server_name }}.key : ECDSA {{ server_name }}.key

4
templates/mobileconfig.j2
View file

@ -45,6 +45,10 @@
<string>{{ item.0 }}</string> <string>{{ item.0 }}</string>
<key>PayloadCertificateUUID</key> <key>PayloadCertificateUUID</key>
<string>1FB2907D-14D3-4BAB-A472-B304F4B7F7D9</string> <string>1FB2907D-14D3-4BAB-A472-B304F4B7F7D9</string>
<key>CertificateType</key>
<string>ECDSA256</string>
<key>ServerCertificateIssuerCommonName</key>
<string>www.ivlis.me</string>
<key>RemoteAddress</key> <key>RemoteAddress</key>
<string>{{ server_name }}</string> <string>{{ server_name }}</string>
<key>RemoteIdentifier</key> <key>RemoteIdentifier</key>