Use 3DES instead of simple DES to encrypt private key.

2013-10-16 16:44:00 +02:00 · 2013-10-16 16:44:00 +02:00 · a842d23d20
parent 0bb337f56c
commit a842d23d20
1 changed files with 1 additions and 1 deletions
--- a/shellpki.sh
+++ b/shellpki.sh
@ -64,7 +64,7 @@ create() {
 echo -n "Should private key be protected by a passphrase? [y/N] "
 read
 if [ "$REPLY" = "y" ] || [ "REPLY" = "Y" ]; then
-    $OPENSSL genrsa -des -out $DIR/$cn.key 2048
+    $OPENSSL genrsa -des3 -out $DIR/$cn.key 2048
 else
    $OPENSSL genrsa -out $DIR/$cn.key 2048
 fi