kore

An easy to use, scalable and secure web application framework for writing web APIs in C.
Commits | Files | Refs | README | LICENSE | git clone https://git.kore.io/kore.git

commit c77ec598e7eb75bef4cb972b4d053f30bea9f6be
parent cf9e97f087b98130a761270b049a6c605a637d61
Author: Joris Vink <joris@coders.se>
Date:   Wed, 21 Apr 2021 10:52:02 +0200

Remove dh parameters from kodev.

Diffstat:
src/cli.c | 24+-----------------------
1 file changed, 1 insertion(+), 23 deletions(-)

diff --git a/src/cli.c b/src/cli.c @@ -287,8 +287,6 @@ static const char *config_data = "\n" "load\t\t./%s.so\n" "\n" - "tls_dhparam\tdh4096.pem\n" - "\n" "domain * {\n" "\tattach\t\ttls\n" "\n" @@ -342,7 +340,6 @@ static const char *python_app_data = "\n" "class KoreApp:\n" " def configure(self, args):\n" - " kore.config.tls_dhparam = \"dh4096.pem\"\n" " kore.config.deployment = \"development\"\n" " kore.server(\"default\", ip=\"127.0.0.1\", port=\"8888\")\n" "\n" @@ -359,21 +356,6 @@ static const char *python_app_data = "\n" "koreapp = KoreApp()"; -static const char *dh4096_data = - "-----BEGIN DH PARAMETERS-----\n" - "MIICCAKCAgEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz\n" - "+8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a\n" - "87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7\n" - "YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi\n" - "7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD\n" - "ssbzSibBsu/6iGtCOGEfz9zeNVs7ZRkDW7w09N75nAI4YbRvydbmyQd62R0mkff3\n" - "7lmMsPrBhtkcrv4TCYUTknC0EwyTvEN5RPT9RFLi103TZPLiHnH1S/9croKrnJ32\n" - "nuhtK8UiNjoNq8Uhl5sN6todv5pC1cRITgq80Gv6U93vPBsg7j/VnXwl5B0rZp4e\n" - "8W5vUsMWTfT7eTDp5OWIV7asfV9C1p9tGHdjzx1VA0AEh/VbpX4xzHpxNciG77Qx\n" - "iu1qHgEtnmgyqQdgCpGBMMRtx3j5ca0AOAkpmaMzy4t6Gh25PXFAADwqTs6p+Y0K\n" - "zAqCkc3OyX3Pjsm1Wn+IpGtNtahR9EGC4caKAH5eZV9q//////////8CAQI=\n" - "-----END DH PARAMETERS-----\n"; - static const char *gitignore = "*.o\n.flavor\n.objs\n%s.so\nassets.h\ncert\n"; #endif /* !KODEV_MINIMAL */ @@ -538,8 +520,7 @@ cli_create(int argc, char **argv) cli_generate_certs(); printf("%s created successfully!\n", appl); - printf("WARNING: DO NOT USE THE GENERATED DH PARAMETERS " - "AND CERTIFICATES IN PRODUCTION\n"); + printf("WARNING: DO NOT USE THE GENERATED CERTIFICATE IN PRODUCTION\n"); } #endif @@ -1375,9 +1356,6 @@ cli_generate_certs(void) RSA *kpair; char issuer[64]; - /* Write out DH parameters. */ - cli_file_create("dh4096.pem", dh4096_data, strlen(dh4096_data)); - /* Create new certificate. */ if ((x509 = X509_new()) == NULL) fatal("X509_new(): %s", ssl_errno_s);