openssl-hardened/ca-dir.patch

   1 --- apps/CA.pl.in       2006-04-28 02:30:49.000000000 +0200
   2 +++ apps/CA.pl.in       2010-04-01 00:35:02.600553509 +0200
   3 @@ -53,7 +53,7 @@
   4  $X509="$openssl x509";
   5  $PKCS12="$openssl pkcs12";
   6
   7 -$CATOP="./demoCA";
   8 +$CATOP="/etc/ssl";
   9  $CAKEY="cakey.pem";
  10  $CAREQ="careq.pem";
  11  $CACERT="cacert.pem";
  12 --- apps/CA.sh  2009-10-15 19:27:47.000000000 +0200
  13 +++ apps/CA.sh  2010-04-01 00:35:02.600553509 +0200
  14 @@ -68,7 +68,7 @@
  15  X509="$OPENSSL x509"
  16  PKCS12="openssl pkcs12"
  17
  18 -if [ -z "$CATOP" ] ; then CATOP=./demoCA ; fi
  19 +if [ -z "$CATOP" ] ; then CATOP=/etc/ssl ; fi
  20  CAKEY=./cakey.pem
  21  CAREQ=./careq.pem
  22  CACERT=./cacert.pem
  23 --- apps/openssl.cnf    2009-04-04 20:09:43.000000000 +0200
  24 +++ apps/openssl.cnf    2010-04-01 00:35:02.607220681 +0200
  25 @@ -39,7 +39,7 @@
  26  ####################################################################
  27  [ CA_default ]
  28
  29 -dir            = ./demoCA              # Where everything is kept
  30 +dir            = /etc/ssl              # Where everything is kept
  31  certs          = $dir/certs            # Where the issued certs are kept
  32  crl_dir                = $dir/crl              # Where the issued crl are kept
  33  database       = $dir/index.txt        # database index file.