0d14727c3e
* Drop 0003 patch - seems no longer to be needed * Stop changing the default openssl config like Arch. This re-enables the idea algo, but I couldn't find anything why it should be disabled. Assume openssl knows what's acceptable. * Run tests in parallel (they pass, with the patch revert workaround) * Move man7 man pages to openssl-docs, that category gained a lot of development related man pages, so move it away from the runtime packages.
32 lines
1.0 KiB
Diff
32 lines
1.0 KiB
Diff
--- a/apps/CA.pl.in
|
|
+++ b/apps/CA.pl.in
|
|
@@ -29,7 +29,7 @@
|
|
my $PKCS12 = "$openssl pkcs12";
|
|
|
|
# Default values for various configuration settings.
|
|
-my $CATOP = "./demoCA";
|
|
+my $CATOP = "/usr/ssl";
|
|
my $CAKEY = "cakey.pem";
|
|
my $CAREQ = "careq.pem";
|
|
my $CACERT = "cacert.pem";
|
|
--- a/apps/openssl.cnf
|
|
+++ b/apps/openssl.cnf
|
|
@@ -79,7 +79,7 @@
|
|
####################################################################
|
|
[ CA_default ]
|
|
|
|
-dir = ./demoCA # Where everything is kept
|
|
+dir = /usr/ssl # Where everything is kept
|
|
certs = $dir/certs # Where the issued certs are kept
|
|
crl_dir = $dir/crl # Where the issued crl are kept
|
|
database = $dir/index.txt # database index file.
|
|
@@ -309,7 +309,7 @@
|
|
[ tsa_config1 ]
|
|
|
|
# These are used by the TSA reply generation only.
|
|
-dir = ./demoCA # TSA root directory
|
|
+dir = /usr/ssl # TSA root directory
|
|
serial = $dir/tsaserial # The current serial number (mandatory)
|
|
crypto_device = builtin # OpenSSL engine to use for signing
|
|
signer_cert = $dir/tsacert.pem # The TSA signing certificate
|