<pre style='margin:0'>
Renee Otten (reneeotten) pushed a commit to branch master
in repository macports-ports.
</pre>
<p><a href="https://github.com/macports/macports-ports/commit/91f17d9e0c8e53197cade675e16fc5cf2ae18a4f">https://github.com/macports/macports-ports/commit/91f17d9e0c8e53197cade675e16fc5cf2ae18a4f</a></p>
<pre style="white-space: pre; background: #F8F8F8">The following commit(s) were added to refs/heads/master by this push:
<span style='display:block; white-space:pre;color:#404040;'> new 91f17d9e0c8 mail-server: Use appropriate hash for P-384 curves in ECC PKI example
</span>91f17d9e0c8 is described below
<span style='display:block; white-space:pre;color:#808000;'>commit 91f17d9e0c8e53197cade675e16fc5cf2ae18a4f
</span>Author: Steven Thomas Smith <s.t.smith@ieee.org>
AuthorDate: Tue Jan 16 19:01:45 2024 -0500
<span style='display:block; white-space:pre;color:#404040;'> mail-server: Use appropriate hash for P-384 curves in ECC PKI example
</span>---
mail/mail-server/Portfile | 10 +++++-----
mail/mail-server/files/prefix/etc/certificates/ca/openssl.cnf | 10 +++++-----
2 files changed, 10 insertions(+), 10 deletions(-)
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/mail/mail-server/Portfile b/mail/mail-server/Portfile
</span><span style='display:block; white-space:pre;color:#808080;'>index 0795030296b..3474b121898 100644
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>--- a/mail/mail-server/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/mail/mail-server/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -596,7 +596,7 @@ SOLR_DELETE_DOVECOT
</span>
# CA certificate
openssl req -config openssl.cnf \\
<span style='display:block; white-space:pre;background:#ffe0e0;'>- -new -x509 -days 1460 -sha256 \\
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ -new -x509 -days 1460 -sha384 \\
</span> -extensions v3_ca \\
-out ca.cert.pem -key private/ca.key.pem \\
-passin file:private/passphrase.txt -batch
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -617,7 +617,7 @@ SOLR_DELETE_DOVECOT
</span>
# Intermediate CA CSR
openssl req -config intermediate/openssl_intermediate.cnf \\
<span style='display:block; white-space:pre;background:#ffe0e0;'>- -new -sha256 \\
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ -new -sha384 \\
</span> -key intermediate/private/intermediate.key.pem \\
-passin file:intermediate/private/passphrase_intermediate.txt \\
-out intermediate/intermediate.csr.pem -batch
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -628,7 +628,7 @@ SOLR_DELETE_DOVECOT
</span>
# Intermediate CA certificate
openssl ca -config openssl.cnf \\
<span style='display:block; white-space:pre;background:#ffe0e0;'>- -days 730 -notext -md sha256 -extensions v3_intermediate_ca \\
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ -days 730 -notext -md sha384 -extensions v3_intermediate_ca \\
</span> -in intermediate/intermediate.csr.pem \\
-out intermediate/intermediate.cert.pem \\
-passin file:private/passphrase.txt -batch
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -659,7 +659,7 @@ SOLR_DELETE_DOVECOT
</span>
# Client certificate CSR
openssl req -config intermediate/openssl_intermediate.cnf \\
<span style='display:block; white-space:pre;background:#ffe0e0;'>- -new -sha256 \\
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ -new -sha384 \\
</span> -key intermediate/private/${fullhost}.key.pem \\
-passin file:intermediate/private/passphrase_client.txt \\
-out intermediate/${fullhost}.csr.pem -batch
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -670,7 +670,7 @@ SOLR_DELETE_DOVECOT
</span>
# Client certificate
openssl ca -config intermediate/openssl_intermediate.cnf \\
<span style='display:block; white-space:pre;background:#ffe0e0;'>- -days 375 -notext -md sha256 \\
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ -days 375 -notext -md sha384 \\
</span> -in intermediate/${fullhost}.csr.pem \\
-out intermediate/${fullhost}.cert.pem \\
-passin file:intermediate/private/passphrase_intermediate.txt \\
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/mail/mail-server/files/prefix/etc/certificates/ca/openssl.cnf b/mail/mail-server/files/prefix/etc/certificates/ca/openssl.cnf
</span><span style='display:block; white-space:pre;color:#808080;'>index 6ee3ba3bab6..5a52e4079e5 100644
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>--- a/mail/mail-server/files/prefix/etc/certificates/ca/openssl.cnf
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/mail/mail-server/files/prefix/etc/certificates/ca/openssl.cnf
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -11,7 +11,7 @@
</span>
# CA certificate
# openssl req -config openssl.cnf \
<span style='display:block; white-space:pre;background:#ffe0e0;'>-# -new -x509 -days 1460 -sha256 -extensions v3_ca -out ca.cert.pem \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+# -new -x509 -days 1460 -sha384 -extensions v3_ca -out ca.cert.pem \
</span> # -key private/ca.key.pem -passin file:private/passphrase.txt -batch
# CA certificate text verification
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -30,7 +30,7 @@
</span> # -passout file:intermediate/private/passphrase_intermediate.txt
# Intermediate CA CSR
<span style='display:block; white-space:pre;background:#ffe0e0;'>-# openssl req -config intermediate/openssl_intermediate.cnf -new -sha256 \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+# openssl req -config intermediate/openssl_intermediate.cnf -new -sha384 \
</span> # -key intermediate/private/intermediate.key.pem \
# -passin file:intermediate/private/passphrase_intermediate.txt -batch \
# -out intermediate/intermediate.csr.pem
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -41,7 +41,7 @@
</span>
# Intermediate CA certificate
# openssl ca -config openssl.cnf \
<span style='display:block; white-space:pre;background:#ffe0e0;'>-# -days 730 -notext -md sha256 -extensions v3_intermediate_ca \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+# -days 730 -notext -md sha384 -extensions v3_intermediate_ca \
</span> # -in intermediate/intermediate.csr.pem \
# -out intermediate/intermediate.cert.pem
# -passin file:private/passphrase.txt -batch
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -71,7 +71,7 @@
</span> # -out intermediate/private/www.example.com.key.pem.decrypted
# Client certificate CSR
<span style='display:block; white-space:pre;background:#ffe0e0;'>-# openssl req -config intermediate/openssl_intermediate.cnf -new -sha256 \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+# openssl req -config intermediate/openssl_intermediate.cnf -new -sha384 \
</span> # -key intermediate/private/www.example.com.key.pem \
# -passin file:intermediate/private/passphrase_client.txt -batch \
# -out intermediate/www.example.com.csr.pem
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -82,7 +82,7 @@
</span>
# Client certificate
# openssl ca -config intermediate/openssl_intermediate.cnf \
<span style='display:block; white-space:pre;background:#ffe0e0;'>-# -days 375 -notext -md sha256 \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+# -days 375 -notext -md sha384 \
</span> # -in intermediate/www.example.com.csr.pem \
# -out intermediate/www.example.com.cert.pem
# -passin file:intermediate/private/passphrase_intermediate.txt -batch \
</pre><pre style='margin:0'>
</pre>