1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
easy-rsa for Debian
-------------------
easy-rsa is a set of scripts to easy the administration of a Certificate
Authority. For example to manage openvpn scripts.
The effortless way to use it is calling "make-cadir DIRECTORY", which will
create a new directory with symlinks to the scripts and a copy of the
configuration files so you can edit them to suit your needs.
i.e.
~$ make-cadir my_ca
~$ cd my_ca
~/my_ca$ vi vars
-- Alberto Gonzalez Iniesta <agi@inittab.org> Mon, 12 Nov 2012 18:18:57 +0100
Improving security of created certificates
------------------------------------------
easy-rsa defaults use 2048 bits for keylength and 10 years (3650 days) as
certificate lifetime.
bettercrypto.org suggests increasing the keylength to 4096 bits and decreasing
the certificate lifetime. You can change those values in the 'vars' file of your
CA directory.
-- Alberto Gonzalez Iniesta <agi@inittab.org> Tue, 07 Jan 2014 12:36:35 +0100
|
