Skip to content

Commit b08edf7

Browse files
peffgitster
authored andcommitted
t/lib-httpd: increase ssl key size to 2048 bits
Recent versions of openssl will refuse to work with 1024-bit RSA keys, as they are considered insecure. I didn't track down the exact version in which the defaults were tightened, but the Debian-package openssl 3.0 on my system yields: $ LIB_HTTPD_SSL=1 ./t5551-http-fetch-smart.sh -v -i [...] SSL Library Error: error:0A00018F:SSL routines::ee key too small 1..0 # SKIP web server setup failed This could probably be overcome with configuration, but that's likely to be a headache (especially if it requires touching /etc/openssl). Let's just pick a key size that's less outrageously out of date. Signed-off-by: Jeff King <[email protected]> Signed-off-by: Junio C Hamano <[email protected]>
1 parent d113449 commit b08edf7

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

t/lib-httpd/ssl.cnf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
RANDFILE = $ENV::RANDFILE_PATH
22

33
[ req ]
4-
default_bits = 1024
4+
default_bits = 2048
55
distinguished_name = req_distinguished_name
66
prompt = no
77
[ req_distinguished_name ]

0 commit comments

Comments
 (0)