bliss: Remove legacy BLISS signatures

This commit is contained in:
Andreas Steffen
2024-11-22 14:05:36 +01:00
committed by Tobias Brunner
parent ec982171d9
commit 4833f29b15
116 changed files with 36 additions and 7719 deletions
-5
View File
@@ -1,8 +1,3 @@
# /etc/ipsec.secrets - strongSwan IPsec secrets file
: RSA bobKey.pem
-4
View File
@@ -1,7 +1,3 @@
# /etc/ipsec.secrets - strongSwan IPsec secrets file
: RSA daveKey.pem
@@ -138,11 +138,3 @@ cd /etc/ca/monster
# generate CRL for strongSwan Monster Root CA
pki --signcrl --cakey strongswanKey.pem --cacert strongswanCert.pem \
> ${ROOT}/strongswan_monster.crl
##
# strongSwan BlISS Root CA
cd /etc/ca/bliss
# generate CRL for strongSwan BLISS Root CA
pki --signcrl --cakey strongswan_blissKey.der --cacert strongswan_blissCert.der \
--lifetime 30 --digest sha3_512 > ${ROOT}/strongswan_bliss.crl
+1 -1
View File
@@ -1,5 +1,5 @@
# strongswan.conf - strongSwan configuration file
pki {
load = random drbg pem sha1 sha2 sha3 pkcs1 pkcs8 pem gmp mgf1 bliss curve25519 x509 openssl
load = random drbg pem sha1 sha2 sha3 pkcs1 pkcs8 pem gmp mgf1 curve25519 x509 openssl
}