bliss: Remove legacy BLISS signatures
This commit is contained in:
committed by
Tobias Brunner
parent
ec982171d9
commit
4833f29b15
@@ -1,8 +1,3 @@
|
||||
# /etc/ipsec.secrets - strongSwan IPsec secrets file
|
||||
|
||||
: RSA bobKey.pem
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,7 +1,3 @@
|
||||
# /etc/ipsec.secrets - strongSwan IPsec secrets file
|
||||
|
||||
: RSA daveKey.pem
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -138,11 +138,3 @@ cd /etc/ca/monster
|
||||
# generate CRL for strongSwan Monster Root CA
|
||||
pki --signcrl --cakey strongswanKey.pem --cacert strongswanCert.pem \
|
||||
> ${ROOT}/strongswan_monster.crl
|
||||
|
||||
##
|
||||
# strongSwan BlISS Root CA
|
||||
cd /etc/ca/bliss
|
||||
|
||||
# generate CRL for strongSwan BLISS Root CA
|
||||
pki --signcrl --cakey strongswan_blissKey.der --cacert strongswan_blissCert.der \
|
||||
--lifetime 30 --digest sha3_512 > ${ROOT}/strongswan_bliss.crl
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
# strongswan.conf - strongSwan configuration file
|
||||
|
||||
pki {
|
||||
load = random drbg pem sha1 sha2 sha3 pkcs1 pkcs8 pem gmp mgf1 bliss curve25519 x509 openssl
|
||||
load = random drbg pem sha1 sha2 sha3 pkcs1 pkcs8 pem gmp mgf1 curve25519 x509 openssl
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user