From 562b65ca38cfe79bce1d33bec363fe72f903a8b6 Mon Sep 17 00:00:00 2001 From: Mikhail Kasimov Date: Fri, 11 May 2018 02:17:27 +0300 Subject: [PATCH] man: systemd-journal-upload: rsa 2048 rsa:2048 is currently in use as minimal recommended key length on cert/key generating. Specifying rsa:1024 is not recommended for security reasons. --- man/systemd-journal-upload.service.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/man/systemd-journal-upload.service.xml b/man/systemd-journal-upload.service.xml index 992f7e61197..7ca2ca4f18e 100644 --- a/man/systemd-journal-upload.service.xml +++ b/man/systemd-journal-upload.service.xml @@ -263,10 +263,10 @@ echo 0001 >serial SERVER=server CLIENT=client -openssl req -newkey rsa:1024 -nodes -out $SERVER.csr -keyout $SERVER.key -subj "/CN=$SERVER/" +openssl req -newkey rsa:2048 -nodes -out $SERVER.csr -keyout $SERVER.key -subj "/CN=$SERVER/" openssl ca -batch -config ca.conf -notext -in $SERVER.csr -out $SERVER.pem -openssl req -newkey rsa:1024 -nodes -out $CLIENT.csr -keyout $CLIENT.key -subj "/CN=$CLIENT/" +openssl req -newkey rsa:2048 -nodes -out $CLIENT.csr -keyout $CLIENT.key -subj "/CN=$CLIENT/" openssl ca -batch -config ca.conf -notext -in $CLIENT.csr -out $CLIENT.pem -- 2.47.3