[Core] Increase RSA key size
This commit is contained in:
parent
5d301a4b33
commit
d56f6cb4f1
|
@ -493,10 +493,10 @@ def generate_ssl_keys():
|
||||||
"""
|
"""
|
||||||
This method generates a new SSL key/cert.
|
This method generates a new SSL key/cert.
|
||||||
"""
|
"""
|
||||||
digest = "md5"
|
digest = "sha256"
|
||||||
# Generate key pair
|
# Generate key pair
|
||||||
pkey = crypto.PKey()
|
pkey = crypto.PKey()
|
||||||
pkey.generate_key(crypto.TYPE_RSA, 1024)
|
pkey.generate_key(crypto.TYPE_RSA, 2048)
|
||||||
|
|
||||||
# Generate cert request
|
# Generate cert request
|
||||||
req = crypto.X509Req()
|
req = crypto.X509Req()
|
||||||
|
@ -509,7 +509,7 @@ def generate_ssl_keys():
|
||||||
cert = crypto.X509()
|
cert = crypto.X509()
|
||||||
cert.set_serial_number(0)
|
cert.set_serial_number(0)
|
||||||
cert.gmtime_adj_notBefore(0)
|
cert.gmtime_adj_notBefore(0)
|
||||||
cert.gmtime_adj_notAfter(60*60*24*365*5) # Five Years
|
cert.gmtime_adj_notAfter(60 * 60 * 24 * 365 * 3) # Three Years
|
||||||
cert.set_issuer(req.get_subject())
|
cert.set_issuer(req.get_subject())
|
||||||
cert.set_subject(req.get_subject())
|
cert.set_subject(req.get_subject())
|
||||||
cert.set_pubkey(req.get_pubkey())
|
cert.set_pubkey(req.get_pubkey())
|
||||||
|
|
Loading…
Reference in New Issue