openssl/repos/core-x86_64/ca-dir.patch

   1 --- a/apps/CA.pl.in
   2 +++ b/apps/CA.pl.in
   3 @@ -29,7 +29,7 @@
   4  my $PKCS12 = "$openssl pkcs12";
   5
   6  # Default values for various configuration settings.
   7 -my $CATOP = "./demoCA";
   8 +my $CATOP = "/etc/ssl";
   9  my $CAKEY = "cakey.pem";
  10  my $CAREQ = "careq.pem";
  11  my $CACERT = "cacert.pem";
  12 --- a/apps/openssl.cnf
  13 +++ b/apps/openssl.cnf
  14 @@ -79,7 +79,7 @@
  15  ####################################################################
  16  [ CA_default ]
  17
  18 -dir            = ./demoCA              # Where everything is kept
  19 +dir            = /etc/ssl              # Where everything is kept
  20  certs          = $dir/certs            # Where the issued certs are kept
  21  crl_dir                = $dir/crl              # Where the issued crl are kept
  22  database       = $dir/index.txt        # database index file.
  23 @@ -309,7 +309,7 @@
  24  [ tsa_config1 ]
  25
  26  # These are used by the TSA reply generation only.
  27 -dir            = ./demoCA              # TSA root directory
  28 +dir            = /etc/ssl              # TSA root directory
  29  serial         = $dir/tsaserial        # The current serial number (mandatory)
  30  crypto_device  = builtin               # OpenSSL engine to use for signing
  31  signer_cert    = $dir/tsacert.pem      # The TSA signing certificate