Using ec (eliptic curve) within dummy-certs

diff --git a/Makefile b/Makefile
index ad8ad871274c5abc1e0fbe15ef9d10838acda2b3..52a8d548d058eb1e6290be8441c1e73bfb991fe5 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -148,7 +148,7 @@ tlsref:
                        -cert certs/localhost-cert.pem  \
                        -key certs/localhost-key.pem    \
                        -starttls smtp                  \
-                       -connect $(TESTSRV):$(TESTPORT) 
+                       -connect tar1.osukiss.org:25
 
 #                      -connect mx2.free.fr:25
 #                      -connect mailprod1.safe.ca:587

diff --git a/support/dummy-cert.sh b/support/dummy-cert.sh
index b489810aa691ccad87d1b829c0eb80197677d391..1655ad3446f6298783910b1de52ea7bbc1776d9e 100755 (executable)
--- a/support/dummy-cert.sh
+++ b/support/dummy-cert.sh
@@ -24,13 +24,17 @@ for target in $@
   PEM1=`mktemp /tmp/openssl.XXXXXX`
   PEM2=`mktemp /tmp/openssl.XXXXXX`
   trap "rm -f $PEM1 $PEM2" SIGINT
+  /usr/bin/openssl ecparam                             \
+       -genkey                                         \
+       -name secp384r1                                 \
+       -out $PEM1
   answers                              |               \
        /usr/bin/openssl req                            \
-               -newkey rsa:4096                        \
-               -keyout $PEM1                           \
+               -key $PEM1                              \
                -nodes                                  \
                -x509                                   \
                -text                                   \
+               -sha384                                 \
                -days 3650                              \
                -out $PEM2      2>      /dev/null
   cp $PEM1  ${target}-key.pem