mirrors/meta-secure-core
1
0
Fork 0
mirror of https://github.com/jiazhang0/meta-secure-core.git synced 2026-07-16 20:56:58 +00:00
Code Issues Projects Releases Wiki Activity

create-user-key-store.sh: replace weak des3 encryption with aes256

Browse Source 
Replace weak des3 encryption with more secure algorithm aes256 to
generate ima key in script create-user-key-store.sh.

Signed-off-by: David Dunlap <david.dunlap@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
This commit is contained in:
David Dunlap
2020-07-16 13:47:42 +00:00
committed by Jia Zhang
parent 7ee985e53f
commit 070f7359b5
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-signing-key/scripts/create-user-key-store.sh
+2 -2
View File
@@ -189,7 +189,7 @@ ca_sign() {
else
# Prompt user to type the password
if [ "$IMA_PASS" = "" ] ; then
openssl genrsa -des3 -out "$key_dir/$key_name.key" 2048 \
openssl genrsa -aes256 -out "$key_dir/$key_name.key" 2048 \
|| print_fatal "openssl failure"
openssl req -new -sha256 \
@@ -198,7 +198,7 @@ ca_sign() {
-out "$key_dir/$key_name.csr" \
|| print_fatal "openssl failure"
else
openssl genrsa -des3 -passout "pass:$IMA_PASS" \
openssl genrsa -aes256 -passout "pass:$IMA_PASS" \
-out "$key_dir/$key_name.key" 2048 \
|| print_fatal "openssl failure"