From: William Lallemand <wlallemand@haproxy.com>
Date: Mon, 14 Apr 2025 13:28:54 +0000 (+0200)
Subject: MINOR: acme: default to 2048bits for RSA
X-Git-Tag: v3.2-dev11~75
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=7119b5149d493999f1ad532480ea06f4edae08ed;p=thirdparty%2Fhaproxy.git

MINOR: acme: default to 2048bits for RSA

Change the default RSA value to 2048 bits.
---

diff --git a/src/acme.c b/src/acme.c
index e36318f1f..c3ee3cd33 100644
--- a/src/acme.c
+++ b/src/acme.c
@@ -75,8 +75,8 @@ struct acme_cfg *new_acme_cfg(const char *name)
 	ret->key.type = EVP_PKEY_EC;
 	ret->key.curves = NID_secp384r1;
 
-	/* default to 4096 bits when using RSA */
-	ret->key.bits = 4096;
+	/* default to 2048 bits when using RSA */
+	ret->key.bits = 2048;
 
 	ret->next = acme_cfgs;
 	acme_cfgs = ret;