From: Mikhail Kasimov Date: Thu, 10 May 2018 23:17:27 +0000 (+0300) Subject: man: systemd-journal-upload: rsa 2048 X-Git-Tag: v239~280^2~1 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=562b65ca38cfe79bce1d33bec363fe72f903a8b6;p=thirdparty%2Fsystemd.git man: systemd-journal-upload: rsa 2048 rsa:2048 is currently in use as minimal recommended key length on cert/key generating. Specifying rsa:1024 is not recommended for security reasons. --- diff --git a/man/systemd-journal-upload.service.xml b/man/systemd-journal-upload.service.xml index 992f7e61197..7ca2ca4f18e 100644 --- a/man/systemd-journal-upload.service.xml +++ b/man/systemd-journal-upload.service.xml @@ -263,10 +263,10 @@ echo 0001 >serial SERVER=server CLIENT=client -openssl req -newkey rsa:1024 -nodes -out $SERVER.csr -keyout $SERVER.key -subj "/CN=$SERVER/" +openssl req -newkey rsa:2048 -nodes -out $SERVER.csr -keyout $SERVER.key -subj "/CN=$SERVER/" openssl ca -batch -config ca.conf -notext -in $SERVER.csr -out $SERVER.pem -openssl req -newkey rsa:1024 -nodes -out $CLIENT.csr -keyout $CLIENT.key -subj "/CN=$CLIENT/" +openssl req -newkey rsa:2048 -nodes -out $CLIENT.csr -keyout $CLIENT.key -subj "/CN=$CLIENT/" openssl ca -batch -config ca.conf -notext -in $CLIENT.csr -out $CLIENT.pem