app-backup/burp: Use SHA256 for generating certificates
authorAmadeusz Żołnowski <aidecoe@gentoo.org>
Sun, 16 Aug 2015 23:52:49 +0000 (00:52 +0100)
committerAmadeusz Żołnowski <aidecoe@gentoo.org>
Sun, 16 Aug 2015 23:53:07 +0000 (00:53 +0100)
SHA1 used to be a default which classified as broken.

Package-Manager: portage-2.2.20.1

app-backup/burp/burp-1.3.48.ebuild
app-backup/burp/burp-1.3.8.ebuild
app-backup/burp/files/1.3.48-0001-Set-default_md-sha256-in-CA.cnf.patch [new file with mode: 0644]
app-backup/burp/files/1.3.8-0001-Set-default_md-sha256-in-CA.cnf.patch [new file with mode: 0644]

index 6e3a4127d84395435f1322fda39c48ac0827aeec..6d1e4b7c2c81c9e23de33152ca21d25af03374ef 100644 (file)
@@ -36,6 +36,7 @@ DOCS=( CONTRIBUTORS DONATIONS UPGRADING )
 PATCHES=(
        "${FILESDIR}/${PV}-bedup-conf-path.patch"
        "${FILESDIR}/${PV}-tinfo.patch"
+       "${FILESDIR}/${PV}-0001-Set-default_md-sha256-in-CA.cnf.patch"
        )
 S="${WORKDIR}/burp"
 
index 5a51e5ac752ff7aa4dbbec8f8de685f2115e3a14..7ac69eb8f61fce01df3a23c5115596e0181fcf23 100644 (file)
@@ -33,7 +33,10 @@ RDEPEND="${DEPEND}
        "
 
 DOCS=( CONTRIBUTORS DONATIONS UPGRADING )
-PATCHES=( "${FILESDIR}/${PV}-bedup-conf-path.patch" )
+PATCHES=(
+       "${FILESDIR}/${PV}-bedup-conf-path.patch"
+       "${FILESDIR}/${PV}-0001-Set-default_md-sha256-in-CA.cnf.patch"
+       )
 S="${WORKDIR}/burp"
 
 pkg_setup() {
diff --git a/app-backup/burp/files/1.3.48-0001-Set-default_md-sha256-in-CA.cnf.patch b/app-backup/burp/files/1.3.48-0001-Set-default_md-sha256-in-CA.cnf.patch
new file mode 100644 (file)
index 0000000..e4cce52
--- /dev/null
@@ -0,0 +1,25 @@
+From dd9b4bad27bf0395c0836d41e61678ba39459422 Mon Sep 17 00:00:00 2001
+From: graham <graham@space.grke.net>
+Date: Tue, 16 Jun 2015 12:29:56 +0000
+Subject: [PATCH] Set default_md=sha256 in CA.cnf.
+
+---
+ configs/certs/CA/CA.cnf | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/configs/certs/CA/CA.cnf b/configs/certs/CA/CA.cnf
+index 097f5fa..608cbce 100644
+--- a/configs/certs/CA/CA.cnf
++++ b/configs/certs/CA/CA.cnf
+@@ -14,7 +14,7 @@ crlnumber               = $dir/crlnumber.txt
+ unique_subject          = no
+-default_md              = sha1
++default_md              = sha256
+ default_days            = 7300
+ default_crl_days        = 7300
+-- 
+2.5.0
+
diff --git a/app-backup/burp/files/1.3.8-0001-Set-default_md-sha256-in-CA.cnf.patch b/app-backup/burp/files/1.3.8-0001-Set-default_md-sha256-in-CA.cnf.patch
new file mode 100644 (file)
index 0000000..e4cce52
--- /dev/null
@@ -0,0 +1,25 @@
+From dd9b4bad27bf0395c0836d41e61678ba39459422 Mon Sep 17 00:00:00 2001
+From: graham <graham@space.grke.net>
+Date: Tue, 16 Jun 2015 12:29:56 +0000
+Subject: [PATCH] Set default_md=sha256 in CA.cnf.
+
+---
+ configs/certs/CA/CA.cnf | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/configs/certs/CA/CA.cnf b/configs/certs/CA/CA.cnf
+index 097f5fa..608cbce 100644
+--- a/configs/certs/CA/CA.cnf
++++ b/configs/certs/CA/CA.cnf
+@@ -14,7 +14,7 @@ crlnumber               = $dir/crlnumber.txt
+ unique_subject          = no
+-default_md              = sha1
++default_md              = sha256
+ default_days            = 7300
+ default_crl_days        = 7300
+-- 
+2.5.0
+