]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
MINOR: acme: default to 2048bits for RSA
authorWilliam Lallemand <wlallemand@haproxy.com>
Mon, 14 Apr 2025 13:28:54 +0000 (15:28 +0200)
committerWilliam Lallemand <wlallemand@haproxy.com>
Mon, 14 Apr 2025 14:14:57 +0000 (16:14 +0200)
Change the default RSA value to 2048 bits.

src/acme.c

index e36318f1f34c6539bfce567459027442fa77909f..c3ee3cd331d2be6eb0a3dddc106f106e79b1876e 100644 (file)
@@ -75,8 +75,8 @@ struct acme_cfg *new_acme_cfg(const char *name)
        ret->key.type = EVP_PKEY_EC;
        ret->key.curves = NID_secp384r1;
 
-       /* default to 4096 bits when using RSA */
-       ret->key.bits = 4096;
+       /* default to 2048 bits when using RSA */
+       ret->key.bits = 2048;
 
        ret->next = acme_cfgs;
        acme_cfgs = ret;