Latest update and remove TLSv1.3 draft
This commit is contained in:
@@ -6,7 +6,7 @@ Port = 4433
|
||||
# Only support 3 curves
|
||||
Curves = P-521:P-384:P-256
|
||||
# Restricted signature algorithms
|
||||
SignatureAlgorithms = RSA+SHA512:ECDSA+SHA512
|
||||
SignatureAlgorithms = RSA+SHA512:ECDSA+SHA512
|
||||
Certificate=server.pem
|
||||
PrivateKey=server.pem
|
||||
ChainCAFile=root.pem
|
||||
|
||||
@@ -6,4 +6,4 @@ Connect = localhost:4433
|
||||
# Only support 3 curves
|
||||
Curves = P-521:P-384:P-256
|
||||
# Restricted signature algorithms
|
||||
SignatureAlgorithms = RSA+SHA512:ECDSA+SHA512
|
||||
SignatureAlgorithms = RSA+SHA512:ECDSA+SHA512
|
||||
@@ -23,7 +23,7 @@ SHARED = TRUE
|
||||
@ !
|
||||
|
||||
# Because we use an option file, we need to redefine this
|
||||
.obj.exe :
|
||||
.obj.exe :
|
||||
$(LINK) $(LINKFLAGS) $<,OPT:/OPT
|
||||
|
||||
all : client-arg.exe client-conf.exe saccept.exe sconnect.exe -
|
||||
|
||||
+1
-1
@@ -8,7 +8,7 @@ automatically using scripts. Example creates a root CA, an intermediate CA
|
||||
signed by the root and several certificates signed by the intermediate CA.
|
||||
|
||||
The script then creates an empty index.txt file and adds entries for the
|
||||
certificates and generates a CRL. Then one certificate is revoked and a
|
||||
certificates and generates a CRL. Then one certificate is revoked and a
|
||||
second CRL generated.
|
||||
|
||||
The script ocsprun.sh runs the test responder on port 8888 covering the
|
||||
|
||||
@@ -13,7 +13,7 @@ CN="OpenSSL Test RSA SHA-512 cert" $OPENSSL req \
|
||||
-config apps.cnf -extensions usr_cert -x509 -nodes \
|
||||
-keyout tsha512.pem -out tsha512.pem -new -days 3650 -sha512
|
||||
|
||||
# Create EC parameters
|
||||
# Create EC parameters
|
||||
|
||||
$OPENSSL ecparam -name P-256 -out ecp256.pem
|
||||
$OPENSSL ecparam -name P-384 -out ecp384.pem
|
||||
|
||||
@@ -42,7 +42,7 @@ CN="Test OCSP Responder Cert" $OPENSSL req -config ca.cnf -nodes \
|
||||
$OPENSSL x509 -req -in respreq.pem -CA intca.pem -CAkey intkey.pem -days 3600 \
|
||||
-extfile ca.cnf -extensions ocsp_cert -CAcreateserial -out resp.pem
|
||||
|
||||
# Example creating a PKCS#3 DH certificate.
|
||||
# Example creating a PKCS#3 DH certificate.
|
||||
|
||||
# First DH parameters
|
||||
|
||||
|
||||
Reference in New Issue
Block a user