Skip to content
This repository has been archived by the owner on Feb 2, 2022. It is now read-only.

Private X.509 key has only 2048 bits #30

Open
ghost opened this issue Jun 5, 2019 · 1 comment
Open

Private X.509 key has only 2048 bits #30

ghost opened this issue Jun 5, 2019 · 1 comment

Comments

@ghost
Copy link

ghost commented Jun 5, 2019

As per the installation manual (v4.0.6 according to the file, v4.0.5 according to the archive name) the generated X.509 private key will have 2048 bits.
4096 bits is not only recommended, but also industry standard since years.

@thanosa75
Copy link
Contributor

Indeed, in the installation manual page 12 (4.0.6) there is an example that mentions 2048 bits. To be fixed.

In our internal certificate generation script (see below for link) we generate a 4096 bit CA key and 4096 bit key for each CSP for internal use.

https://github.com/melicertes/csp/blob/develop/csp-apps/configuration/conf-client-cspapp/src/main/resources/shellscripts/internalCerts.sh#L27
https://github.com/melicertes/csp/blob/develop/csp-apps/configuration/conf-client-cspapp/src/main/resources/shellscripts/internalCerts.sh#L37

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Development

No branches or pull requests

1 participant