From 6ad90e12e8261a53442c87de030da801194c79cb Mon Sep 17 00:00:00 2001
From: Vitezslav Cizek <vcizek@suse.com>
Date: Sep 10 2019 11:36:20 +0000
Subject: Use stronger password in gencert


gencert doesn't work in FIPS mode, because the current "httptest"
password is considered to weak by NSS.
Use a stronger password to pass the stricter FIPS mode check.

---

diff --git a/gencert.in b/gencert.in
index 0fd1c67..91e0b17 100755
--- a/gencert.in
+++ b/gencert.in
@@ -75,6 +75,10 @@ VALIDITY=48
 # 3 is the server cert "Server-Cert".
 CERTSERIAL=0
 
+# Password for the certificate. Uses special characters and mixed case in order
+# to pass the strict NSS FIPS mode check
+PASSWORD="hTtp.Te5t"
+
 if [ $# -lt 1 ]
 then
     echo "usage: $0 <destdir>" 1>&2
@@ -115,7 +119,7 @@ done
 echo "TEST = $TEST"
 echo "SNI = $SNI"
 
-echo "httptest" > $DEST/pw.txt
+echo "$PASSWORD" > $DEST/pw.txt
 
 function generate_server_sni_cert {
     hostname=$1
@@ -173,7 +177,7 @@ function generate_server_sni_cert {
 echo ""
 echo "#####################################################################"
 echo "Generating new server certificate and key database. The password"
-echo "is httptest"
+echo "is $PASSWORD"
 echo "#####################################################################"
 $CERTUTIL -N -d $DBDIR -f $DEST/pw.txt
 
@@ -329,7 +333,7 @@ rm $DEST/pw.txt
 rm $DEST/noise
 
 echo ""
-echo "The database password is httptest"
+echo "The database password is $PASSWORD"
 echo ""
 
 exit 0