generate-self-signed-cert: Remove RANDFILE.

This was not needed for OpenSSL ≥ 1.1.1 (all our supported platforms),
and breaks with OpenSSL ≥ 3.0.0 (Ubuntu 22.04).  It was removed from
the upstream configuration file too: https://bugs.debian.org/990228.

Signed-off-by: Anders Kaseorg <anders@zulip.com>
This commit is contained in:
Anders Kaseorg 2022-02-24 19:37:57 -08:00 committed by Tim Abbott
parent f852af0709
commit f9997e311c
1 changed files with 0 additions and 2 deletions

View File

@ -77,8 +77,6 @@ cat >"$config" <<EOF
# Based on /usr/share/ssl-cert/ssleay.cnf from Debian's \`ssl-cert\` # Based on /usr/share/ssl-cert/ssleay.cnf from Debian's \`ssl-cert\`
# package, which is used for the system's snakeoil cert in /etc/ssl/. # package, which is used for the system's snakeoil cert in /etc/ssl/.
RANDFILE = /dev/urandom
[ req ] [ req ]
default_bits = 2048 default_bits = 2048
distinguished_name = req_distinguished_name distinguished_name = req_distinguished_name