Change keysize defaults from 1024 to 2048 bits and change the default
hash from md5 to sha256. Also, removed an oddly-specific call for sha1
in one instance.
Signed-off-by: Josh Cepek <josh.cepek@usa.net>
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
* Removed duplicate KEY_EMAIL var
* Commented out KEY_PCS11 vars [1]
* Commented out KEY_CN with explanation
* Set saner defaults
* reorganized vars, "required" fields first
[1] I commented these out because they're already set to dummy and you only need to change them if you're indeed going to use them. This makes it a little less confusing to newbies who may not be interested in PKCS11 and get confused when reading that they should now "leave any of these fields blank".
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
This is required to allow applying Alon's autotools/rpm/documentation patches
from GitHub OpenVPN/easy-rsa-old tree.
Signed-off-by: Samuli Seppänen <samuli@openvpn.net>
Signed-off-by: Eric F Crist <ecrist@secure-computing.net>