sgallagher / sscg

Simple Signed Certificate Generator

GNU General Public License v3.0

77 stars 13 forks source link

sscg 3.0 #24

Closed sgallagher closed 3 years ago

sgallagher commented 3 years ago

Changes for sscg 3.0

New features

Support for OpenSSL 3.0
Support for outputting named Diffie-Hellman parameter groups
Support for CentOS Stream 9

Major version notes

SSCG now requires OpenSSL 1.1.0 or later.
sscg will now always output DH parameters to a PEM file. It will default to using the ffdhe4096 group.
Generated certificate lifetime now defaults to 398 days, rather than ten years to conform to modern browser expectations.