create-user-key-store.sh: replace weak des3 encryption with aes256

Replace weak des3 encryption with more secure algorithm aes256 to
generate ima key in script create-user-key-store.sh.

Signed-off-by: David Dunlap <david.dunlap@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>

1 files changed, 2 insertions, 2 deletions

diff --git a/meta-signing-key/scripts/create-user-key-store.sh b/meta-signing-key/scripts/create-user-key-store.sh
index a63f50e..30e3c28 100755
--- a/meta-signing-key/scripts/create-user-key-store.sh
+++ b/meta-signing-key/scripts/create-user-key-store.sh
@@ -189,7 +189,7 @@ ca_sign() {
         else
             # Prompt user to type the password
             if [ "$IMA_PASS" = "" ] ; then
-                openssl genrsa -des3 -out "$key_dir/$key_name.key" 2048 \
+                openssl genrsa -aes256 -out "$key_dir/$key_name.key" 2048 \
                         || print_fatal "openssl failure"
 
                 openssl req -new -sha256 \
@@ -198,7 +198,7 @@ ca_sign() {
                     -out "$key_dir/$key_name.csr" \
                         || print_fatal "openssl failure"
             else
-                openssl genrsa -des3 -passout "pass:$IMA_PASS" \
+                openssl genrsa -aes256 -passout "pass:$IMA_PASS" \
                     -out "$key_dir/$key_name.key" 2048 \
                         || print_fatal "openssl failure"