From: W.C.A. Wijngaards Date: Fri, 8 Mar 2024 08:07:36 +0000 (+0100) Subject: - Fix unbound-control-setup.cmd to use 3072 bits so that certificates X-Git-Tag: release-1.19.3rc2~2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d79f11dccc4a671dd7bf43478a114899959651a1;p=thirdparty%2Funbound.git - Fix unbound-control-setup.cmd to use 3072 bits so that certificates are long enough for newer OpenSSL versions. --- diff --git a/doc/Changelog b/doc/Changelog index b0acd0504..09881de47 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -1,3 +1,7 @@ +8 March 2024: Wouter + - Fix unbound-control-setup.cmd to use 3072 bits so that certificates + are long enough for newer OpenSSL versions. + 7 March 2024: Wouter - Version set to 1.19.3 for release. After 1.19.2 point release with security fix for CVE-2024-1931, Denial of service when trimming diff --git a/winrc/unbound-control-setup.cmd b/winrc/unbound-control-setup.cmd index 8c283fd5c..31c21efa8 100644 --- a/winrc/unbound-control-setup.cmd +++ b/winrc/unbound-control-setup.cmd @@ -48,7 +48,7 @@ rem validity period for certificates set DAYS=7200 rem size of keys in bits -set BITS=1536 +set BITS=3072 rem hash algorithm set HASH=sha256