Set openssl req default_bits to the configured key size

debops · Aug 20, 2016 · 50a2f8b · 50a2f8b
1 parent fa6bb40
commit 50a2f8b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/files/secret/pki/lib/pki-authority b/files/secret/pki/lib/pki-authority
@@ -207,7 +207,7 @@ create_openssl_request_config () {
 
 [ req ]
 default_md             = sha256
-default_bits           = 4096
+default_bits           = ${config['key_size']}
 default_keyfile        = private/key.pem
 prompt                 = no
 encrypt_key            = no

diff --git a/files/usr/local/lib/pki/pki-realm b/files/usr/local/lib/pki/pki-realm
@@ -511,7 +511,7 @@ create_openssl_config () {
 
 [ req ]
 default_md         = sha256
-default_bits       = 2048
+default_bits       = ${config['realm_key_size']}
 default_keyfile    = private/key.pem
 prompt             = no
 encrypt_key        = no