From: Michael Tremer <git@ipfire.org>
To: ipfire-scm@lists.ipfire.org
Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 898fe209ff2b72dfdc54e8bac8b99d1644b14eb0
Date: Tue, 29 Jan 2019 13:53:45 +0000 [thread overview]
Message-ID: <20190129135345.A119D84FDD4@people01.i.ipfire.org> (raw)
[-- Attachment #1: Type: text/plain, Size: 3712 bytes --]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via 898fe209ff2b72dfdc54e8bac8b99d1644b14eb0 (commit)
via a946892338329dbee0289132413d4849e3641f7e (commit)
from 61ee842911ec21254931cd52bd601ee3d28033c6 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 898fe209ff2b72dfdc54e8bac8b99d1644b14eb0
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Tue Jan 29 13:51:37 2019 +0000
core128: Ship updated OpenSSL configuration files
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit a946892338329dbee0289132413d4849e3641f7e
Author: Erik Kapfer <ummeegge(a)ipfire.org>
Date: Tue Jan 8 20:33:32 2019 +0100
del_rand: Deletion of RAND file in openssl config
Fixes #11943
Since the kernel RNG should do this, there is no need for this anymore.
Signed-off-by: Erik Kapfer <ummeegge(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
-----------------------------------------------------------------------
Summary of changes:
config/ovpn/openssl/ovpn.cnf | 2 --
config/rootfiles/core/128/exclude | 1 -
config/rootfiles/core/128/filelists/files | 2 ++
config/ssl/openssl.cnf | 2 --
4 files changed, 2 insertions(+), 5 deletions(-)
Difference in files:
diff --git a/config/ovpn/openssl/ovpn.cnf b/config/ovpn/openssl/ovpn.cnf
index 40daf2a0a..96c3dcb09 100644
--- a/config/ovpn/openssl/ovpn.cnf
+++ b/config/ovpn/openssl/ovpn.cnf
@@ -1,5 +1,4 @@
HOME = .
-RANDFILE = /var/ipfire/ovpn/ca/.rnd
oid_section = new_oids
[ new_oids ]
@@ -17,7 +16,6 @@ certificate = $dir/ca/cacert.pem
serial = $dir/certs/serial
crl = $dir/crl.pem
private_key = $dir/ca/cakey.pem
-RANDFILE = $dir/ca/.rand
x509_extensions = usr_cert
default_days = 999999
default_crl_days = 30
diff --git a/config/rootfiles/core/128/exclude b/config/rootfiles/core/128/exclude
index b22159878..22cf4a994 100644
--- a/config/rootfiles/core/128/exclude
+++ b/config/rootfiles/core/128/exclude
@@ -11,7 +11,6 @@ etc/ipsec.user.secrets
etc/localtime
etc/shadow
etc/snort/snort.conf
-etc/ssl/openssl.cnf
etc/sudoers
etc/sysconfig/firewall.local
etc/sysconfig/rc.local
diff --git a/config/rootfiles/core/128/filelists/files b/config/rootfiles/core/128/filelists/files
index 007c06ab7..f5a8913b4 100644
--- a/config/rootfiles/core/128/filelists/files
+++ b/config/rootfiles/core/128/filelists/files
@@ -2,6 +2,8 @@ etc/system-release
etc/issue
srv/web/ipfire/cgi-bin/credits.cgi
var/ipfire/langs
+etc/ssl/openssl.cnf
etc/sysctl.conf
srv/web/ipfire/cgi-bin/proxy.cgi
usr/local/bin/xt_geoip_update
+var/ipfire/ovpn/openssl/ovpn.cnf
diff --git a/config/ssl/openssl.cnf b/config/ssl/openssl.cnf
index 9d1e6e1ff..3b980fcd4 100644
--- a/config/ssl/openssl.cnf
+++ b/config/ssl/openssl.cnf
@@ -1,5 +1,4 @@
HOME = .
-RANDFILE = /var/tmp/.rnd
oid_section = new_oids
[ new_oids ]
@@ -17,7 +16,6 @@ certificate = $dir/ca/cacert.pem
serial = $dir/certs/serial
crl = $dir/crls/cacrl.pem
private_key = $dir/private/cakey.pem
-RANDFILE = $dir/tmp/.rand
x509_extensions = usr_cert
default_days = 999999
default_crl_days= 30
hooks/post-receive
--
IPFire 2.x development tree
reply other threads:[~2019-01-29 13:53 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20190129135345.A119D84FDD4@people01.i.ipfire.org \
--to=git@ipfire.org \
--cc=ipfire-scm@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox