From 971938e7043cbbc877039cb75009033cc0bc967f Mon Sep 17 00:00:00 2001
From: David Walser <luigiwalser@yahoo.com>
Date: Wed, 1 Apr 2015 17:25:15 +0100
Subject: ssl: Change default key length to 2048.

Various browsers and other clients are dropping support for 1024-SSL
certificates so we should not generate them by default.

mga#15576
---
 create-ssl-certificate | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'create-ssl-certificate')

diff --git a/create-ssl-certificate b/create-ssl-certificate
index 954f187..599719b 100755
--- a/create-ssl-certificate
+++ b/create-ssl-certificate
@@ -22,7 +22,7 @@ fi
 if [ ! -f /etc/pki/tls/private/$srv.pem ]; then 
     # default values
     host=$(hostname)
-    KEY_LENGTH=1024
+    KEY_LENGTH=2048
     CERT_DAYS=365
     EMAIL_ADDRESS=root@$host
     COMMON_NAME=$host
-- 
cgit v1.2.1