- Fix unbound-control-setup.cmd to use 3072 bits so that certificates

  are long enough for newer OpenSSL versions.

diff --git a/doc/Changelog b/doc/Changelog
index b0acd05045725b6c1b0f012eab5ec01213b4489a..09881de476acf1718026ce0c55099faf8da22338 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,7 @@
+8 March 2024: Wouter
+       - Fix unbound-control-setup.cmd to use 3072 bits so that certificates
+         are long enough for newer OpenSSL versions.
+
 7 March 2024: Wouter
        - Version set to 1.19.3 for release. After 1.19.2 point release with
          security fix for CVE-2024-1931, Denial of service when trimming

diff --git a/winrc/unbound-control-setup.cmd b/winrc/unbound-control-setup.cmd
index 8c283fd5cb69ca993698e45be328112a79cc5355..31c21efa82ae3ec63a59789f34e2831877a0cae7 100644 (file)
--- a/winrc/unbound-control-setup.cmd
+++ b/winrc/unbound-control-setup.cmd
@@ -48,7 +48,7 @@ rem validity period for certificates
 set DAYS=7200\r
 \r
 rem size of keys in bits\r
-set BITS=1536\r
+set BITS=3072\r
 \r
 rem hash algorithm\r
 set HASH=sha256\r