git/t/lib-httpd/ssl.cnf at bc47f16db2bccb0398edd93af27086f35a3cb97a - development/git - HydraGit

development/git

mirror of https://github.com/git/git synced 2024-11-05 18:59:29 +00:00

Jeff King b08edf709d t/lib-httpd: increase ssl key size to 2048 bits

Recent versions of openssl will refuse to work with 1024-bit RSA keys,
as they are considered insecure. I didn't track down the exact version
in which the defaults were tightened, but the Debian-package openssl 3.0
on my system yields:

  $ LIB_HTTPD_SSL=1 ./t5551-http-fetch-smart.sh -v -i
  [...]
  SSL Library Error: error:0A00018F:SSL routines::ee key too small
  1..0 # SKIP web server setup failed

This could probably be overcome with configuration, but that's likely
to be a headache (especially if it requires touching /etc/openssl).
Let's just pick a key size that's less outrageously out of date.

Signed-off-by: Jeff King <peff@peff.net>
Signed-off-by: Junio C Hamano <gitster@pobox.com>

2023-02-01 10:10:34 -08:00

8 lines

227 B

INI

Raw Blame History

 RANDFILE                = $ENV::RANDFILE_PATH
 [ req ]
 default_bits            = 2048
 distinguished_name      = req_distinguished_name
 prompt                  = no
 [ req_distinguished_name ]
 commonName              = 127.0.0.1