From 740b863750bb2445ac40b3e5b8c6c3cbc2488b42 Mon Sep 17 00:00:00 2001 From: Alex Auvolat Date: Tue, 6 Jul 2021 11:11:18 +0200 Subject: Update genkeys.sh to generate ed25519 keys instead of RSA --- genkeys.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/genkeys.sh b/genkeys.sh index 92d86ab8..70fe12e0 100755 --- a/genkeys.sh +++ b/genkeys.sh @@ -11,7 +11,7 @@ cd pki # the RPC protocol will use to authenticate the other side. if [ ! -f garage-ca.key ]; then echo "Generating Garage CA keys..." - openssl genrsa -out garage-ca.key 4096 + openssl genpkey -algorithm ED25519 -out garage-ca.key openssl req -x509 -new -nodes -key garage-ca.key -sha256 -days 3650 -out garage-ca.crt -subj "/C=FR/O=Garage" fi @@ -22,7 +22,7 @@ fi if [ ! -f garage.crt ]; then echo "Generating Garage agent keys..." if [ ! -f garage.key ]; then - openssl genrsa -out garage.key 4096 + openssl genpkey -algorithm ED25519 -out garage.key fi openssl req -new -sha256 -key garage.key -subj "/C=FR/O=Garage/CN=garage" \ -out garage.csr @@ -56,7 +56,7 @@ fi if [ ! -f garage-client.crt ]; then echo "Generating Garage client keys..." if [ ! -f garage-client.key ]; then - openssl genrsa -out garage-client.key 4096 + openssl genpkey -algorithm ED25519 -out garage-client.key fi openssl req -new -sha256 -key garage-client.key -subj "/C=FR/O=Garage" \ -out garage-client.csr -- cgit v1.2.3