Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deprecate key_type and key_size #53

Merged
merged 1 commit into from
Nov 29, 2020
Merged

Conversation

tangrufus
Copy link
Member

@tangrufus tangrufus commented Nov 29, 2020

To avoid misconfiguration, the key_type (ECDSA or RSA) and key_size (bits) options are deprecated. Since this PR, this role generates 521-bit ECDSA keys only.

If you had previsously generated CA certificates with other configurations:

  1. remove the CA certificates from servers
  2. revoke the CA certificates via Cloudflare dashboard
  3. re-provision the servers

close #42

@tangrufus tangrufus force-pushed the deprecate-key-type-and-key-size branch from c472829 to b9cc4d1 Compare November 29, 2020 18:14
@tangrufus tangrufus merged commit e937a0e into master Nov 29, 2020
@tangrufus tangrufus deleted the deprecate-key-type-and-key-size branch November 29, 2020 18:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Warn if RSA key_size is too low
1 participant