lixuewei / rt-n56u

Automatically exported from code.google.com/p/rt-n56u
0 stars 0 forks source link

https-cert.sh script: increase certificate bit length from 1024 to 2048 #1081

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. run https-cert.sh

What is the expected output? 
256 bytes / 2048 bits key length 

What do you see instead?
128 bytes / 1024 bits key length 

What version of the product are you using?
RT-N56U_3.4.3.7-072_base

Please describe the problem as detailed as it's possible.
Currently google is using 256 bytes / 2048 bits as key length.

Suggested patch at line 172:
- openssl genrsa -des3 -passout pass:password -out server.pem 1024 > /dev/null 
2>&1
+ openssl genrsa -des3 -passout pass:password -out server.pem 2048 > /dev/null 
2>&1

Original issue reported on code.google.com by 2...@probackup.nl on 20 Nov 2013 at 9:03

GoogleCodeExporter commented 9 years ago
As for me, it's not interesting for me at all which values google use today and 
will use tomorrow! =)

Original comment by d...@soulblader.com on 24 Nov 2013 at 11:49

GoogleCodeExporter commented 9 years ago
"RSA claims that 1024-bit keys are likely to become crackable some time between 
2006 and 2010 and that 2048-bit keys are sufficient until 2030"

Original comment by c_u_late...@hotmail.com on 27 Nov 2013 at 3:47

GoogleCodeExporter commented 9 years ago
Updates on this? Should be quite easy to implement for security sake.

Original comment by c_u_late...@hotmail.com on 15 Jan 2014 at 10:18