Commit a7626557 authored Feb 02, 2016 by Emilia Kasper

RT 3854: Update apps/req



Change the default keysize to 2048 bits, and the minimum to 512 bits.

Reviewed-by: Rich Salz <rsalz@openssl.org>

parent 04f171c0

apps/req.c

+2 −2

Original line number	Diff line number	Diff line
		@@ -89,8 +89,8 @@
		#define STRING_MASK "string_mask"
		#define UTF8_IN "utf8"

		#define DEFAULT_KEY_LENGTH 512
		#define MIN_KEY_LENGTH 384
		#define DEFAULT_KEY_LENGTH 2048
		#define MIN_KEY_LENGTH 512

		static int make_REQ(X509_REQ req, EVP_PKEY pkey, char *dn, int mutlirdn,
		int attribs, unsigned long chtype);

doc/apps/req.pod

+6 −3

Original line number	Diff line number	Diff line
		@@ -324,9 +324,12 @@ configuration file values.

		=item B<default_bits>

		This specifies the default key size in bits. If not specified then
		512 is used. It is used if the B<-new> option is used. It can be
		overridden by using the B<-newkey> option.
		Specifies the default key size in bits.

		This option is used in conjunction with the B<-new> option to generate
		a new key. It can be overridden by specifying an explicit key size in
		the B<-newkey> option. The smallest accepted key size is 512 bits. If
		no key size is specified then 2048 bits is used.

		=item B<default_keyfile>