Make tor-gencert create 2048 bit signing keys.

diff --git a/changes/bug10324 b/changes/bug10324
new file mode 100644 (file)
index 0000000..9cd7d5b
--- /dev/null
+++ b/changes/bug10324
@@ -0,0 +1,2 @@
+  o Tool changes:
+    - Make tor-gencert create 2048 bit signing keys. Addresses ticket #10324.

diff --git a/src/tools/tor-gencert.c b/src/tools/tor-gencert.c
index 25beb2aae12afb9e04f4e984a4dfb0b95dd00db6..2f95cf7c5221c47aa47b5864c452780c8c83e54c 100644 (file)
--- a/src/tools/tor-gencert.c
+++ b/src/tools/tor-gencert.c
@@ -34,7 +34,7 @@
 #include "address.h"
 
 #define IDENTITY_KEY_BITS 3072
-#define SIGNING_KEY_BITS 1024
+#define SIGNING_KEY_BITS 2048
 #define DEFAULT_LIFETIME 12
 
 /* These globals are set via command line options. */