Bug 31116

Summary: default_bits = 1024
Product: Sisyphus Reporter: Michael Shigorin <mike>
Component: cert-sh-functionsAssignee: Mikhail Efremov <sem>
Status: CLOSED FIXED QA Contact: qa-sisyphus
Severity: normal    
Priority: P3 CC: cas, evg
Version: unstable   
Hardware: all   
OS: Linux   

Description Michael Shigorin 2015-07-01 18:38:36 MSK
Генерируются исключительно 1024-битные ключи -- "ты выглядишь так несовременно рядом со мной" (ц), хорошо бы хоть 2048 по умолчанию.
Comment 1 Repository Robot 2015-07-08 20:39:51 MSK
cert-sh-functions-1.0.0-alt1 -> sisyphus:

* Wed Jul 08 2015 Mikhail Efremov <sem@altlinux> 1.0.0-alt1
- Minor spec cleanup.
- ssl_generate(): Make errors fatal.
- Make new self-signed certificate if expired (closes: #19082).
- Make errors not fatal.
- Fix ssl_check_pem() (closes: #24983).
- Use 1024 bits for dhparam as default.
- Allow set number of bits as argument to ssl_make_key().
- Use 2048 bits for RSA key by default (closes: #31116).
Comment 2 Michael Shigorin 2015-07-09 12:15:51 MSK
Спасибо!
Comment 3 Michael Shigorin 2015-11-13 11:47:51 MSK
Туда же:

* Thu Nov 12 2015 Mikhail Efremov <sem@altlinux> 1.0.1-alt1
- Make DH bits and certificate days configurable.
- Always separate rm's options from arguments.