Author: nbd
Date: 2016-01-25 18:42:25 +0100 (Mon, 25 Jan 2016)
New Revision: 48494

Modified:
   trunk/package/network/services/uhttpd/files/uhttpd.config
   trunk/package/network/services/uhttpd/files/uhttpd.init
Log:
package/uhttpd: generate 2048 bit RSA key

RSA keys should be generated with sufficient length.
Using 1024 bits is considered unsafe.
In other packages the used key length is 2048 bits.

Signed-off-by: Heinrich Schuchardt <[email protected]>

Modified: trunk/package/network/services/uhttpd/files/uhttpd.config
===================================================================
--- trunk/package/network/services/uhttpd/files/uhttpd.config   2016-01-25 
16:30:41 UTC (rev 48493)
+++ trunk/package/network/services/uhttpd/files/uhttpd.config   2016-01-25 
17:42:25 UTC (rev 48494)
@@ -111,7 +111,7 @@
        option days             730
 
        # RSA key size
-       option bits             1024
+       option bits             2048
 
        # Location
        option country          ZZ

Modified: trunk/package/network/services/uhttpd/files/uhttpd.init
===================================================================
--- trunk/package/network/services/uhttpd/files/uhttpd.init     2016-01-25 
16:30:41 UTC (rev 48493)
+++ trunk/package/network/services/uhttpd/files/uhttpd.init     2016-01-25 
17:42:25 UTC (rev 48494)
@@ -45,7 +45,7 @@
 
        [ -x "$PX5G_BIN" ] && {
                $PX5G_BIN selfsigned -der \
-                       -days ${days:-730} -newkey rsa:${bits:-1024} -keyout 
"${UHTTPD_KEY}.new" -out "${UHTTPD_CERT}.new" \
+                       -days ${days:-730} -newkey rsa:${bits:-2048} -keyout 
"${UHTTPD_KEY}.new" -out "${UHTTPD_CERT}.new" \
                        -subj 
/C="${country:-DE}"/ST="${state:-Saxony}"/L="${location:-Leipzig}"/CN="${commonname:-OpenWrt}"
                sync
                mv "${UHTTPD_KEY}.new" "${UHTTPD_KEY}"
_______________________________________________
openwrt-commits mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-commits

Reply via email to