[Pkg-openssl-changes] r616 - in openssl/trunk/debian: . patches

[Kurt Roeckx]

Author: kroeckx
Date: 2013-11-01 19:55:24 +0000 (Fri, 01 Nov 2013)
New Revision: 616

Added:
   openssl/trunk/debian/patches/defaults.patch
Removed:
   openssl/trunk/debian/patches/default_bits.patch
Modified:
   openssl/trunk/debian/changelog
   openssl/trunk/debian/patches/series
Log:
Change default digest to SHA256 instead of SHA1.  (Closes: #694738)


Modified: openssl/trunk/debian/changelog
===================================================================
--- openssl/trunk/debian/changelog	2013-11-01 18:24:29 UTC (rev 615)
+++ openssl/trunk/debian/changelog	2013-11-01 19:55:24 UTC (rev 616)
@@ -1,3 +1,9 @@
+openssl (1.0.1e-5) unstable; urgency=low
+
+  * Change default digest to SHA256 instead of SHA1.  (Closes: #694738)
+
+ -- Kurt Roeckx <kurt at roeckx.be>  Fri, 01 Nov 2013 20:49:48 +0100
+
 openssl (1.0.1e-4) unstable; urgency=low
 
   [ Peter Michael Green ]

Deleted: openssl/trunk/debian/patches/default_bits.patch
===================================================================
--- openssl/trunk/debian/patches/default_bits.patch	2013-11-01 18:24:29 UTC (rev 615)
+++ openssl/trunk/debian/patches/default_bits.patch	2013-11-01 19:55:24 UTC (rev 616)
@@ -1,11 +0,0 @@
---- openssl/apps/openssl.cnf	2012-06-06 00:51:47.000000000 +0200
-+++ openssl/apps/openssl.cnf	2012-06-06 00:53:48.000000000 +0200
-@@ -105,7 +105,7 @@
- 
- ####################################################################
- [ req ]
--default_bits		= 1024
-+default_bits		= 2048
- default_keyfile 	= privkey.pem
- distinguished_name	= req_distinguished_name
- attributes		= req_attributes

Copied: openssl/trunk/debian/patches/defaults.patch (from rev 614, openssl/trunk/debian/patches/default_bits.patch)
===================================================================
--- openssl/trunk/debian/patches/defaults.patch	                        (rev 0)
+++ openssl/trunk/debian/patches/defaults.patch	2013-11-01 19:55:24 UTC (rev 616)
@@ -0,0 +1,27 @@
+From: Kurt Roeckx <kurt at roeckx.be>
+Subject: Change default bit size and digest
+Date: Fri, 01 Nov 2013 20:47:14 +0100
+
+Index: openssl-1.0.1e/apps/openssl.cnf
+===================================================================
+--- openssl-1.0.1e.orig/apps/openssl.cnf	2013-11-01 20:48:24.000000000 +0100
++++ openssl-1.0.1e/apps/openssl.cnf	2013-11-01 20:49:09.000000000 +0100
+@@ -72,7 +72,7 @@
+ 
+ default_days	= 365			# how long to certify for
+ default_crl_days= 30			# how long before next CRL
+-default_md	= default		# use public key default MD
++default_md	= sha256
+ preserve	= no			# keep passed DN ordering
+ 
+ # A few difference way of specifying how similar the request should look
+@@ -103,7 +103,8 @@
+ 
+ ####################################################################
+ [ req ]
+-default_bits		= 1024
++default_bits		= 2048
++default_md		= sha256
+ default_keyfile 	= privkey.pem
+ distinguished_name	= req_distinguished_name
+ attributes		= req_attributes

Modified: openssl/trunk/debian/patches/series
===================================================================
--- openssl/trunk/debian/patches/series	2013-11-01 18:24:29 UTC (rev 615)
+++ openssl/trunk/debian/patches/series	2013-11-01 19:55:24 UTC (rev 616)
@@ -30,7 +30,7 @@
 block_digicert_malaysia.patch
 c_rehash-multi.patch
 #padlock_conf.patch
-default_bits.patch
+defaults.patch
 ssltest_no_sslv2.patch
 cpuid.patch
 aesni-mac.patch