- Fix unbound-control-setup.cmd to use 3072 bits so that certificates

are long enough for newer OpenSSL versions.
NLnetLabs · Mar 8, 2024 · 939baeb · 939baeb
1 parent 326ba26
commit 939baeb
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/doc/Changelog b/doc/Changelog
@@ -1,3 +1,7 @@
+8 March 2024: Wouter
+	- Fix unbound-control-setup.cmd to use 3072 bits so that certificates
+	  are long enough for newer OpenSSL versions.
+
 7 March 2024: Wouter
 	- Version set to 1.19.3 for release. After 1.19.2 point release with
 	  security fix for CVE-2024-1931, Denial of service when trimming

diff --git a/winrc/unbound-control-setup.cmd b/winrc/unbound-control-setup.cmd
@@ -48,7 +48,7 @@ rem validity period for certificates
 set DAYS=7200
 
 rem size of keys in bits
-set BITS=1536
+set BITS=3072
 
 rem hash algorithm
 set HASH=sha256