net-cert-increase-default-key-length-for-newly-gener.patch 973 Bytes
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12
From 088a50b2fc66418294166b61f31925426b1a9c54 Mon Sep 17 00:00:00 2001
From: Jan Engelhardt <jengelh@inai.de>
Date: Mon, 15 Sep 2014 10:52:32 +0200
Subject: [PATCH 12/66] net/cert: increase default key length for
 newly-generated RSA keys

Should we add something for chrome://settings, or just leave
it as hidden as it was before?
---
 net/cert/x509_util.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

13
Index: chromium-128.0.6613.137/net/cert/x509_util.cc
14
===================================================================
15 16
--- chromium-128.0.6613.137.orig/net/cert/x509_util.cc
+++ chromium-128.0.6613.137/net/cert/x509_util.cc
17
@@ -285,7 +285,7 @@ bool GetTLSServerEndPointChannelBinding(
18 19 20 21 22 23 24 25
 }
 
 // RSA keys created by CreateKeyAndSelfSignedCert will be of this length.
-static const uint16_t kRSAKeyLength = 1024;
+static const uint16_t kRSAKeyLength = 2048;
 
 // Certificates made by CreateKeyAndSelfSignedCert will be signed using this
 // digest algorithm.