From d79f11dccc4a671dd7bf43478a114899959651a1 Mon Sep 17 00:00:00 2001 From: "W.C.A. Wijngaards" Date: Fri, 8 Mar 2024 09:07:36 +0100 Subject: [PATCH] - Fix unbound-control-setup.cmd to use 3072 bits so that certificates are long enough for newer OpenSSL versions. --- doc/Changelog | 4 ++++ winrc/unbound-control-setup.cmd | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/doc/Changelog b/doc/Changelog index b0acd0504..09881de47 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -1,3 +1,7 @@ +8 March 2024: Wouter + - Fix unbound-control-setup.cmd to use 3072 bits so that certificates + are long enough for newer OpenSSL versions. + 7 March 2024: Wouter - Version set to 1.19.3 for release. After 1.19.2 point release with security fix for CVE-2024-1931, Denial of service when trimming diff --git a/winrc/unbound-control-setup.cmd b/winrc/unbound-control-setup.cmd index 8c283fd5c..31c21efa8 100644 --- a/winrc/unbound-control-setup.cmd +++ b/winrc/unbound-control-setup.cmd @@ -48,7 +48,7 @@ rem validity period for certificates set DAYS=7200 rem size of keys in bits -set BITS=1536 +set BITS=3072 rem hash algorithm set HASH=sha256 -- 2.47.2