From c15d2f1e5e3cc6488b8d1415f463485d9eccfd43 Mon Sep 17 00:00:00 2001
From: Guillaume Rousse <guillomovitch@gmail.com>
Date: Sun, 20 Dec 2020 11:51:25 +0100
Subject: revert default key length for SSL certificates 2048 bits

---
 create-ssl-certificate | 2 +-
 ssl                    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/create-ssl-certificate b/create-ssl-certificate
index 398470a..a0d7352 100755
--- a/create-ssl-certificate
+++ b/create-ssl-certificate
@@ -22,7 +22,7 @@ fi
 if [ ! -f "/etc/pki/tls/private/$srv.pem" ]; then 
     # default values
     host=$(hostname)
-    KEY_LENGTH=4096
+    KEY_LENGTH=2048
     CERT_DAYS=365
     EMAIL_ADDRESS=root@$host
     COMMON_NAME=$host
diff --git a/ssl b/ssl
index 376cb90..9df9ae7 100644
--- a/ssl
+++ b/ssl
@@ -1,7 +1,7 @@
 # configuration file for create-ssl-certificate rpm scriptlet
 
 # key length
-KEY_LENGTH=4096
+KEY_LENGTH=2048
 
 # certificate duration
 CERT_DAYS=365
-- 
cgit v1.2.1