Browse Source

Lowered RSA bits to 2048

Paul-Louis Ageneau 4 years ago
parent
commit
08a6c5c45b
1 changed files with 2 additions and 2 deletions
  1. 2 2
      src/impl/certificate.cpp

+ 2 - 2
src/impl/certificate.cpp

@@ -110,7 +110,7 @@ certificate_ptr make_certificate_impl(CertificateType type) {
 		break;
 	}
 	case CertificateType::Rsa: {
-		const unsigned int bits = gnutls_sec_param_to_pk_bits(GNUTLS_PK_RSA, GNUTLS_SEC_PARAM_HIGH);
+		const unsigned int bits = 2048;
 		gnutls::check(gnutls_x509_privkey_generate(*privkey, GNUTLS_PK_RSA, bits, 0),
 		              "Unable to generate RSA key pair");
 		break;
@@ -225,7 +225,7 @@ certificate_ptr make_certificate_impl(CertificateType type) {
 	case CertificateType::Rsa: {
 		PLOG_VERBOSE << "Generating RSA key pair";
 
-		const int bits = 3072;
+		const int bits = 2048;
 		const unsigned int e = 65537; // 2^16 + 1
 
 		unique_ptr<RSA, decltype(&RSA_free)> rsa(RSA_new(), RSA_free);