[Sec 730] Increase RSA_generate_key modulus

bk: 5493a302jOLrQGoItvqYDeqBiXs34w

diff --git a/ChangeLog b/ChangeLog
index f47ecb33aca03d7d9af53e0d4467b7fb06bd7769..df0121d7ebdf3486ab9b109043eb56e983bf564e 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,4 @@
+* [Sec 730] Increase RSA_generate_key modulus.
 * [Bug 2691] Wrong variable name in refclock_ripencc.c.
 (4.2.7p486-RC) 2014/12/18 Released by Harlan Stenn <stenn@ntp.org>
 * [Bug 2687] RefClock 26/hpgps doesn't work at default line speed

diff --git a/util/ntp-keygen.c b/util/ntp-keygen.c
index d55a3572cf2ab0b956964876a2a474f05ebe0fd2..e4bfac2c170dac5c5444cae468590888369fe03a 100644 (file)
--- a/util/ntp-keygen.c
+++ b/util/ntp-keygen.c
@@ -958,7 +958,7 @@ gen_rsa(
        FILE    *str;
 
        fprintf(stderr, "Generating RSA keys (%d bits)...\n", modulus);
-       rsa = RSA_generate_key(modulus, 3, cb, "RSA");
+       rsa = RSA_generate_key(modulus, 65537, cb, "RSA");
        fprintf(stderr, "\n");
        if (rsa == NULL) {
                fprintf(stderr, "RSA generate keys fails\n%s\n",
@@ -1299,7 +1299,7 @@ gen_gqkey(
        fprintf(stderr,
            "Generating GQ parameters (%d bits)...\n",
             modulus2);
-       rsa = RSA_generate_key(modulus2, 3, cb, "GQ");
+       rsa = RSA_generate_key(modulus2, 65537, cb, "GQ");
        fprintf(stderr, "\n");
        if (rsa == NULL) {
                fprintf(stderr, "RSA generate keys fails\n%s\n",