tech-security archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

invalid -default_md sha2 in /usr/share/examples/openssl/openssl.cnf



For netbsd-9 /usr/share/examples/openssl/openssl.cnf includes the line

default_md             = sha2

With this in place a simple openssl req fails - eg:

% openssl req -x509 -nodes -days 1000000 -newkey rsa:4096 -keyout
backup_key.pem -subj
"/C=GB/ST=London/L=London/O=TAO/CN=www.example.com"  -out
backup_key.pem.pub

req: Unrecognized flag sha2
req: Use -help for summary.

This line is the only difference between NetBSD's
usr/share/examples/openssl/openssl.cnf and /etc/ssl/openssl.cnf on an
Ubuntu 20.04 box (OpenSSL 1.1.1k & 1.1.1f respectively)

Should it be removed or adjusted?

David


Home | Main Index | Thread Index | Old Index