After 1/1/2014, 1024 bit keys are no longer considered secure enough and may not be supported by all browsers. So changes to use 2048 bit public key. See Appendix A in this document: https://www.cabforum.org/Baseline_Requirements_V1.pdf Signed-off-by: Mark Wu <wudxw(a)linux.vnet.ibm.com&gt; --- src/kimchi/sslcert.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/kimchi/sslcert.py b/src/kimchi/sslcert.py index 37b4961..1ca8502 100644 --- a/src/kimchi/sslcert.py +++ b/src/kimchi/sslcert.py @@ -39,7 +39,7 @@ class SSLCert(object): self.cert = X509.X509() pubkey = EVP.PKey() - rsa = RSA.gen_key(1024, 65537, keygen_cb) + rsa = RSA.gen_key(2048, 65537, keygen_cb) pubkey.assign_rsa(rsa) self._key = rsa.as_pem(None, callback=passphrase_cb) rsa = None