From: Harlan Stenn <stenn@ntp.org>
Date: Fri, 19 Dec 2014 04:01:06 +0000 (-0500)
Subject: [Sec 730] Increase RSA_generate_key modulus
X-Git-Tag: NTP_4_2_8~5^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=267ce670a13633257c6416009f163a05dcb15d69;p=thirdparty%2Fntp.git

[Sec 730] Increase RSA_generate_key modulus

bk: 5493a302jOLrQGoItvqYDeqBiXs34w
---

diff --git a/ChangeLog b/ChangeLog
index f47ecb33a..df0121d7e 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,4 @@
+* [Sec 730] Increase RSA_generate_key modulus.
 * [Bug 2691] Wrong variable name in refclock_ripencc.c.
 (4.2.7p486-RC) 2014/12/18 Released by Harlan Stenn <stenn@ntp.org>
 * [Bug 2687] RefClock 26/hpgps doesn't work at default line speed
diff --git a/util/ntp-keygen.c b/util/ntp-keygen.c
index d55a3572c..e4bfac2c1 100644
--- a/util/ntp-keygen.c
+++ b/util/ntp-keygen.c
@@ -958,7 +958,7 @@ gen_rsa(
 	FILE	*str;
 
 	fprintf(stderr, "Generating RSA keys (%d bits)...\n", modulus);
-	rsa = RSA_generate_key(modulus, 3, cb, "RSA");
+	rsa = RSA_generate_key(modulus, 65537, cb, "RSA");
 	fprintf(stderr, "\n");
 	if (rsa == NULL) {
 		fprintf(stderr, "RSA generate keys fails\n%s\n",
@@ -1299,7 +1299,7 @@ gen_gqkey(
 	fprintf(stderr,
 	    "Generating GQ parameters (%d bits)...\n",
 	     modulus2);
-	rsa = RSA_generate_key(modulus2, 3, cb, "GQ");
+	rsa = RSA_generate_key(modulus2, 65537, cb, "GQ");
 	fprintf(stderr, "\n");
 	if (rsa == NULL) {
 		fprintf(stderr, "RSA generate keys fails\n%s\n",