aboutsummaryrefslogtreecommitdiffstats
path: root/apps
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2016-05-11 12:41:58 +0100
committerDr. Stephen Henson <steve@openssl.org>2016-05-11 20:36:10 +0100
commit8fc06e8860d91aefa32f0de2dd7d46a719b81cad (patch)
tree974edc6e5d7247be997b216550ed167cfa8e57aa /apps
parent2ab851b779a77d119e1677b2495b368a46d83eef (diff)
downloadopenssl-8fc06e8860d91aefa32f0de2dd7d46a719b81cad.tar.gz
Update pkcs8 defaults.
Update pkcs8 utility to use 256 bit AES using SHA256 by default. Update documentation. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Diffstat (limited to 'apps')
-rw-r--r--apps/pkcs8.c6
1 files changed, 4 insertions, 2 deletions
diff --git a/apps/pkcs8.c b/apps/pkcs8.c
index cd4e76b6d0..d7ac5cb015 100644
--- a/apps/pkcs8.c
+++ b/apps/pkcs8.c
@@ -177,6 +177,8 @@ int pkcs8_main(int argc, char **argv)
"%s: Unknown PRF algorithm %s\n", prog, opt_arg());
goto opthelp;
}
+ if (cipher == NULL)
+ cipher = EVP_aes_256_cbc();
break;
case OPT_ITER:
if (!opt_int(opt_arg(), &iter))
@@ -225,8 +227,8 @@ int pkcs8_main(int argc, char **argv)
goto end;
}
- if ((pbe_nid == -1) && !cipher)
- pbe_nid = NID_pbeWithMD5AndDES_CBC;
+ if ((pbe_nid == -1) && cipher == NULL)
+ cipher = EVP_aes_256_cbc();
in = bio_open_default(infile, 'r', informat);
if (in == NULL)