forked from etdey/ssl.ca
-
Notifications
You must be signed in to change notification settings - Fork 0
/
CHANGELOG
37 lines (24 loc) · 1.22 KB
/
CHANGELOG
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
-------------------------------------------------------------------------------
Updates from Eric Dey
Release v0.4, 10-FEB-2019
- Forced CN to always be a Subject Alternate Name for Chrome compatibility
- Added code signing fields for user certificates
Release v0.3, 08-MAR-2016
- Added handling for Subject Alternate Names as DNS host names and IPs.
- Parameterized key bits; default 2048.
- Parameterized hash algorithm; default SHA256.
- Parameterized certificate expiration days; default 730 for server/user
- Use /dev/urandom for entropy instead of static "random-bits" file. (1)
- Changed from DES3 to AES256 to encrypt Root CA key.
- Server key usage as: nonRepudiation, digitalSignature, keyEncipherment
- All scripts changed to use BASH.
- Miscellaneous script clean-ups.
Note 1: See README for a discussion about the entropy source.
-------------------------------------------------------------------------------
Updates from Mike Rhyner
Release v0.2, 22-MAR-2004
- Added handling for renewal of certificates
-------------------------------------------------------------------------------
Updates from Yeak Nai Siew
Release v0.1, 24-APR-2000
- Initial public release