Change fallback keysize to 2048

This commit is contained in:
Werner Koch 2009-11-10 16:35:59 +00:00
parent b3cda3f45c
commit 5741eace29
2 changed files with 6 additions and 3 deletions

View File

@ -10,6 +10,9 @@
2009-11-04 Werner Koch <wk@g10code.com>
* certreqgen.c (proc_parameters): Change fallback key length to
2048.
* server.c (register_commands): Add help arg to
assuan_register_command. Provide help strings for all commands.

View File

@ -61,7 +61,7 @@ The format of the native parameter file is follows:
This is a required parameter. For now the only supported
algorithm is "rsa".
Key-Length: <length-in-bits>
Length of the key in bits. Default is 1024.
Length of the key in bits. Default is 2048.
Key-Grip: hexstring
This is optional and used to generate a request for an already
existing key. Key-Length will be ignored when given,
@ -83,7 +83,7 @@ Here is an example:
$ cat >foo <<EOF
%echo Generating a standard key
Key-Type: RSA
Key-Length: 1024
Key-Length: 2048
Name-DN: CN=test cert 1,OU=Aegypten Project,O=g10 Code GmbH,L=Düsseldorf,C=DE
Name-Email: joe@foo.bar
# Do a commit here, so that we can later print "done" :-)
@ -477,7 +477,7 @@ proc_parameters (ctrl_t ctrl,
/* Check the keylength. */
if (!get_parameter (para, pKEYLENGTH, 0))
nbits = 1024;
nbits = 2048;
else
nbits = get_parameter_uint (para, pKEYLENGTH);
if ((nbits < 1024 || nbits > 4096) && !cardkeyid)