| Summary: | irc/quassel: Generates 1024 bit RSA keys by default, which are a bit dated | ||
|---|---|---|---|
| Product: | Ports & Packages | Reporter: | Robert Sevat <robert> |
| Component: | Individual Port(s) | Assignee: | Max Brazhnikov <makc> |
| Status: | Closed FIXED | ||
| Severity: | Affects Only Me | Keywords: | needs-patch, security |
| Priority: | --- | Flags: | bugzilla:
maintainer-feedback?
(makc) |
| Version: | Latest | ||
| Hardware: | Any | ||
| OS: | Any | ||
A commit references this bug: Author: makc Date: Tue Mar 24 09:47:52 UTC 2015 New revision: 382075 URL: https://svnweb.freebsd.org/changeset/ports/382075 Log: irc/quassel: - Generate 4096 bit RSA certificate PR: 198809 Suggested by: Robert Sevat Changes: head/irc/quassel/Makefile head/irc/quassel/files/quasselcore.in Committed, thanks! |
irc/quassel by default generates 1024 bit RSA keys which are a bit dated. irc/quassel/files/quasselcore.in quasselcore_keygen() { openssl req -x509 -nodes -days 365 -newkey rsa:1024 \ I changed it to 4096 bit on my server and it quassel functions correctly with it. I'd suggest changing it to 2048 at least, preferably 4096. Kind Regards, Robert Sevat