committing changes in /etc after apt run

Package changes:
-firefox 86.0+linuxmint1+tricia amd64
-firefox-locale-de 86.0+linuxmint1+tricia amd64
-firefox-locale-en 86.0+linuxmint1+tricia amd64
+firefox 86.0.1+linuxmint1+tricia amd64
+firefox-locale-de 86.0.1+linuxmint1+tricia amd64
+firefox-locale-en 86.0.1+linuxmint1+tricia amd64
-libssl-dev 1.1.1j-1+ubuntu18.04.1+deb.sury.org+3 amd64
+libssl-dev 1.1.1-1ubuntu2.1~18.04.8 amd64
-libssl1.1 1.1.1j-1+ubuntu18.04.1+deb.sury.org+3 amd64
+libssl1.1 1.1.1-1ubuntu2.1~18.04.8 amd64
-linux-libc-dev 4.15.0-136.140 amd64
+linux-libc-dev 4.15.0-137.141 amd64
-openssl 1.1.1j-1+ubuntu18.04.1+deb.sury.org+3 amd64
+openssl 1.1.1-1ubuntu2.1~18.04.8 amd64

diff --git a/ssl/openssl.cnf b/ssl/openssl.cnf
index 4acca4b0446f536598cc1b127b0975294c928c58..7d1a8bb6e7f06b7abf6df53dca4e3170b7fdd2f6 100644 (file)
--- a/ssl/openssl.cnf
+++ b/ssl/openssl.cnf
@@ -10,6 +10,7 @@
 # This definition stops the following lines choking if HOME isn't
 # defined.
 HOME                   = .
+RANDFILE               = $ENV::HOME/.rnd
 
 # Extra OBJECT IDENTIFIER info:
 #oid_file              = $ENV::HOME/.oid
@@ -18,7 +19,7 @@ oid_section           = new_oids
 # To use this configuration file with the "-extfile" option of the
 # "openssl x509" utility, name here the section containing the
 # X.509v3 extensions to use:
-# extensions           =
+# extensions           = 
 # (Alternatively, use a configuration file that has only
 # X.509v3 extensions in its main [= default] section.)
 
@@ -56,6 +57,7 @@ crlnumber     = $dir/crlnumber        # the current crl number
                                        # must be commented out to leave a V1 CRL
 crl            = $dir/crl.pem          # The current CRL
 private_key    = $dir/private/cakey.pem# The private key
+RANDFILE       = $dir/private/.rand    # private random number file
 
 x509_extensions        = usr_cert              # The extensions to add to the cert
 
@@ -115,7 +117,7 @@ x509_extensions     = v3_ca # The extensions to add to the self signed cert
 # input_password = secret
 # output_password = secret
 
-# This sets a mask for permitted string types. There are several options.
+# This sets a mask for permitted string types. There are several options. 
 # default: PrintableString, T61String, BMPString.
 # pkix  : PrintableString, BMPString (PKIX recommendation before 2004)
 # utf8only: only UTF8Strings (PKIX recommendation after 2004).