From a842d23d20ffeb1b47252b702d9e43f1c127f484 Mon Sep 17 00:00:00 2001
From: Romain Dessort <rdessort@evolix.fr>
Date: Wed, 16 Oct 2013 16:44:00 +0200
Subject: [PATCH] Use 3DES instead of simple DES to encrypt private key.

---
 shellpki.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/shellpki.sh b/shellpki.sh
index 87e8557..5b97327 100755
--- a/shellpki.sh
+++ b/shellpki.sh
@@ -64,7 +64,7 @@ create() {
 echo -n "Should private key be protected by a passphrase? [y/N] "
 read
 if [ "$REPLY" = "y" ] || [ "REPLY" = "Y" ]; then
-    $OPENSSL genrsa -des -out $DIR/$cn.key 2048
+    $OPENSSL genrsa -des3 -out $DIR/$cn.key 2048
 else
     $OPENSSL genrsa -out $DIR/$cn.key 2048
 fi