From ce8a5bbed2d69a3439f45b3db7afa57c817a48c7 Mon Sep 17 00:00:00 2001
From: Daniel Jakots <djakots@evolix.ca>
Date: Sat, 20 May 2017 22:37:07 -0400
Subject: [PATCH] retire des3 and use aes

---
 shellpki.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/shellpki.sh b/shellpki.sh
index 2502246..8427839 100755
--- a/shellpki.sh
+++ b/shellpki.sh
@@ -73,7 +73,7 @@ create() {
 echo -n "Should private key be protected by a passphrase? [y/N] "
 read REPLY
 if [ "$REPLY" = "y" ] || [ "REPLY" = "Y" ]; then
-    $OPENSSL genrsa -des3 -out $DIR/$cn.key 2048
+    $OPENSSL genrsa -aes128 -out $DIR/$cn.key 2048
 else
     $OPENSSL genrsa -out $DIR/$cn.key 2048
 fi