[Kimchi-devel] [PATCH] Changes to use 2048 bit public key for self-signed certificate
After 1/1/2014, 1024 bit keys are no longer considered secure enough
and may not be supported by all browsers. So changes to use 2048 bit
public key.
See Appendix A in this document:
https://www.cabforum.org/Baseline_Requirements_V1.pdf
Signed-off-by: Mark Wu <wudxw(a)linux.vnet.ibm.com>
---
src/kimchi/sslcert.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/kimchi/sslcert.py b/src/kimchi/sslcert.py
index 37b4961..1ca8502 100644
--- a/src/kimchi/sslcert.py
+++ b/src/kimchi/sslcert.py
@@ -39,7 +39,7 @@ class SSLCert(object):
self.cert = X509.X509()
pubkey = EVP.PKey()
- rsa = RSA.gen_key(1024, 65537, keygen_cb)
+ rsa = RSA.gen_key(2048, 65537, keygen_cb)
pubkey.assign_rsa(rsa)
self._key = rsa.as_pem(None, callback=passphrase_cb)
rsa = None
--
1.8.4.2