Merge pull request #45 from basak/keysize

Increase key size to 2048 bits
python-trio · Apr 15, 2019 · 15c60e6 · 15c60e6
2 parents b928870 + b06ad87
commit 15c60e6
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/newsfragments/45.bugfix.rst b/newsfragments/45.bugfix.rst
@@ -0,0 +1 @@
+Update key size to 2048 bits, as required by recent Debian.
diff --git a/trustme/__init__.py b/trustme/__init__.py
@@ -30,10 +30,11 @@
 except NameError:
     unicode = str
 
-# On my laptop, making a CA + server certificate using 1024 bit keys takes ~40
-# ms, and using 4096 bit keys takes ~2 seconds. We want tests to run in 40 ms,
-# not 2 seconds.
-_KEY_SIZE = 1024
+# On my laptop, making a CA + server certificate using 2048 bit keys takes ~160
+# ms, and using 4096 bit keys takes ~2 seconds. We want tests to run in 160 ms,
+# not 2 seconds. And we can't go lower, since Debian (and probably others)
+# by default reject any keys with <2048 bits (see #45).
+_KEY_SIZE = 2048
 
 
 def _name(name, common_name=None):