Mercurial > hg > nginx-tests
diff ssl_engine_keys.t @ 1488:dbce8fb5f5f8
Tests: align with OpenSSL security level 2.
This updates minimum requirements to 2048 bit RSA keys and SHA-2 message digest.
| author | Sergey Kandaurov <pluknet@nginx.com> |
|---|---|
| date | Tue, 09 Jul 2019 13:37:55 +0300 |
| parents | 44973a23b031 |
| children | 144c6ce732e4 |
line wrap: on
line diff
--- a/ssl_engine_keys.t +++ b/ssl_engine_keys.t @@ -106,7 +106,7 @@ init = 1 PIN = 1234 [ req ] -default_bits = 1024 +default_bits = 2048 encrypt_key = no distinguished_name = req_distinguished_name [ req_distinguished_name ] @@ -127,7 +127,7 @@ foreach my $name ('localhost') { . ">>$d/openssl.out 2>&1"); system('pkcs11-tool --module=/usr/local/lib/softhsm/libsofthsm.so ' - . '-p 1234 -l -k -d 0 -a nx_key_0 --key-type rsa:1024 ' + . '-p 1234 -l -k -d 0 -a nx_key_0 --key-type rsa:2048 ' . ">>$d/openssl.out 2>&1"); system('openssl req -x509 -new -engine pkcs11 '