From: Mark Andrews <marka@isc.org>
Date: Thu, 12 Jan 2023 22:48:53 +0000 (+1100)
Subject: get_algorithms.py: use FIPS compatible bit size
X-Git-Tag: v9.19.12~38^2~8
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=4e7dadd2057029741d2a8cc764442083706305d2;p=thirdparty%2Fbind9.git

get_algorithms.py: use FIPS compatible bit size

The minimum RSA key size that can be used in FIPS mode is 2048 bits.
---

diff --git a/bin/tests/system/get_algorithms.py b/bin/tests/system/get_algorithms.py
index e21e208ce92..ca4b68c2d12 100755
--- a/bin/tests/system/get_algorithms.py
+++ b/bin/tests/system/get_algorithms.py
@@ -53,9 +53,9 @@ class AlgorithmSet(NamedTuple):
     "disable-algorithms" configuration option."""
 
 
-RSASHA1 = Algorithm("RSASHA1", 5, 1280)
-RSASHA256 = Algorithm("RSASHA256", 8, 1280)
-RSASHA512 = Algorithm("RSASHA512", 10, 1280)
+RSASHA1 = Algorithm("RSASHA1", 5, 2048)
+RSASHA256 = Algorithm("RSASHA256", 8, 2048)
+RSASHA512 = Algorithm("RSASHA512", 10, 2048)
 ECDSAP256SHA256 = Algorithm("ECDSAP256SHA256", 13, 256)
 ECDSAP384SHA384 = Algorithm("ECDSAP384SHA384", 14, 384)
 ED25519 = Algorithm("ED25519", 15, 256)