[pve-devel] [PATCH cluster 1/2] Change CA SSL key size to 4096 bit

[Fabian Grünbichler]

---
 data/PVE/Cluster.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/data/PVE/Cluster.pm b/data/PVE/Cluster.pm
index 0085316..d325f8f 100644
--- a/data/PVE/Cluster.pm
+++ b/data/PVE/Cluster.pm
@@ -165,7 +165,7 @@ sub gen_pveca_key {
     return if -f $pveca_key_fn;
 
     eval {
-	run_silent_cmd(['openssl', 'genrsa', '-out', $pveca_key_fn, '2048']);
+	run_silent_cmd(['openssl', 'genrsa', '-out', $pveca_key_fn, '4096']);
     };
 
     die "unable to generate pve ca key:\n$@" if $@;
-- 
2.1.4