[openssl-dev] Out-of-date [ req ] defaults in apps/openssl.cnf?

William A Rowe Jr wrowe at rowe-clan.net
Wed Jan 13 18:15:16 UTC 2016


I note that on the 1.0.1q package openssl.cnf, default_bits is still 1024,
while it has been updated to 2048 for the 1.0.2e release.

Both still include no default_md, and I would expect that should now
look like

[ req ]
default_md = sha256
default_bits = 2048

on both 1.0.1 and 1.0.2 future releases, to conform with the current
guidance?
Thoughts?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160113/aca5850f/attachment.html>


More information about the openssl-dev mailing list