Dne 15.5.2015 v 13:33 Martin Basti napsal(a):
On 15/05/15 13:12, Petr Spacek wrote:
On 14.5.2015 17:23, Martin Basti wrote:
Looking at 3072 bit key size, I think we can prolong KSK key rotation
to 2 years.

It should be okay according to http://dx.doi.org/10.6028/NIST.SP.800-81-2
section 11.2.

Modified patch is attached.

Thank you for reviewing it :-)


Pushed to:
master: 96f6d6ca09922f56aa63cfdebc934bd9db0d3ed5
ipa-4-1: 9b7fe37c9d3a8a11c3485c73fd67f90298e793c5

Jan Cholasta

Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to