crichardson/docker-xubuntu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Switch to 256-bit ECDSA RDP key

Browse Source
This commit is contained in:
Héctor Molinero Fernández
2021-06-01 21:40:09 +02:00
parent 429a9b7b8d
commit 056d2d9088
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
scripts/bin/container-init
View File

@@ -95,11 +95,11 @@ if [ ! -f "${XRDP_TLS_KEY_PATH:?}" ] || [ ! -f "${XRDP_TLS_CRT_PATH:?}" ]; then
FQDN=$(hostname --fqdn) FQDN=$(hostname --fqdn)
(umask 077 \ (umask 077 \
&& openssl genrsa -out "${XRDP_TLS_KEY_PATH:?}" 2048 \ && openssl ecparam -genkey -name prime256v1 > "${XRDP_TLS_KEY_PATH:?}" \
) >/dev/null ) >/dev/null
(umask 022 \ (umask 022 \
&& openssl req -x509 -subj "/CN=${FQDN:?}" -addext "subjectAltName=DNS:${FQDN:?}" -days 3650 -key "${XRDP_TLS_KEY_PATH:?}" > "${XRDP_TLS_CRT_PATH:?}" \ && openssl req -x509 -sha256 -days 3650 -subj "/CN=${FQDN:?}" -addext "subjectAltName=DNS:${FQDN:?}" -key "${XRDP_TLS_KEY_PATH:?}" > "${XRDP_TLS_CRT_PATH:?}" \
) >/dev/null ) >/dev/null
fi fi