Daniel Kahn Gillmor 121286d9d1

gpgsm: default to 3072-bit keys. ...

* doc/gpgsm.texi, doc/howto-create-a-server-cert.texi: : update
default to 3072 bits.
* sm/certreqgen-ui.c (gpgsm_gencertreq_tty): update default to
3072 bits.
* sm/certreqgen.c (proc_parameters): update default to 3072 bits.
* sm/gpgsm.c (main): print correct default_pubkey_algo.

--

3072-bit RSA is widely considered to be 128-bit-equivalent security.
This is a sensible default in 2017.

Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>

Gbp-Pq: Topic update-defaults
Gbp-Pq: Name 0014-gpgsm-default-to-3072-bit-keys.patch
(cherry picked from commit 7955262151a5c755814dd23414e6804f79125355)

2019-02-28 11:00:31 +01:00

..

call-agent.c

gpg,sm: New option --request-origin.

2018-03-23 09:06:20 +01:00

call-dirmngr.c

sm: Fix dirmngr loadcrl for intermediate certs

2018-10-23 15:59:54 +02:00

certchain.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

certcheck.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

certdump.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

certlist.c

sm: Do not expect X.509 keyids to be unique

2017-10-24 17:29:04 +02:00

certreqgen-ui.c

gpgsm: default to 3072-bit keys.

2019-02-28 11:00:31 +01:00

certreqgen.c

gpgsm: default to 3072-bit keys.

2019-02-28 11:00:31 +01:00

ChangeLog-2011

Generate the ChangeLog from commit logs.

2011-12-01 11:09:02 +01:00

decrypt.c

gpg,sm: Error out on compliance mismatch while decrypting.

2017-08-01 08:41:47 +02:00

delete.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

encrypt.c

gpg,sm: String changes for compliance diagnostics.

2017-07-28 17:46:43 +02:00

export.c

sm: Fix minor memory leak in --export-p12.

2018-02-14 14:54:51 +01:00

fingerprint.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

gpgsm-w32info.rc

w32: Add icons and version information.

2013-05-07 21:35:48 +02:00

gpgsm.c

gpgsm: default to 3072-bit keys.

2019-02-28 11:00:31 +01:00

gpgsm.h

gpg,sm: New option --request-origin.

2018-03-23 09:06:20 +01:00

import.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

keydb.c

sm, w32: Fix initial keybox creation

2017-11-14 12:26:29 +01:00

keydb.h

gpg,sm: Add STATUS_ERROR keydb_search and keydb_add-resource.

2016-11-10 17:07:28 +01:00

keylist.c

sm: Fix colon listing of fields > 12 in crt records.

2017-10-19 14:59:34 +02:00

Makefile.am

Remove -I option to common.

2017-03-07 20:25:54 +09:00

minip12.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

minip12.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

misc.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

passphrase.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

passphrase.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

qualified.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

server.c

sm: Add OPTION request-origin.

2018-03-23 15:07:56 +01:00

sign.c

gpg,sm: String changes for compliance diagnostics.

2017-07-28 17:46:43 +02:00

verify.c

gpg,sm: String changes for compliance diagnostics.

2017-07-28 17:46:43 +02:00