File 0002-dhparam-set-the-default-to-2048-bits.patch of Package compat-openssl098.29129
From 8568170d774f02880eec6cad5512f555d0c83f65 Mon Sep 17 00:00:00 2001 From: Emilia Kasper <emilia@openssl.org> Date: Wed, 13 May 2015 11:57:55 +0200 Subject: [PATCH 2/5] dhparam: set the default to 2048 bits Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Kurt Roeckx <kurt@openssl.org> --- apps/dhparam.c | 4 ++-- apps/gendh.c | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) Index: openssl-1.0.1i/apps/dhparam.c =================================================================== --- openssl-1.0.1i.orig/apps/dhparam.c 2015-06-12 13:16:47.628625800 +0200 +++ openssl-1.0.1i/apps/dhparam.c 2015-06-12 13:17:23.851068922 +0200 @@ -130,7 +130,7 @@ #undef PROG #define PROG dhparam_main -#define DEFBITS 512 +#define DEFBITS 2048 /* -inform arg - input format - default PEM (DER or PEM) * -outform arg - output format - default PEM @@ -253,7 +253,7 @@ bad: BIO_printf(bio_err," -C Output C code\n"); BIO_printf(bio_err," -2 generate parameters using 2 as the generator value\n"); BIO_printf(bio_err," -5 generate parameters using 5 as the generator value\n"); - BIO_printf(bio_err," numbits number of bits in to generate (default 512)\n"); + BIO_printf(bio_err," numbits number of bits in to generate (default 2048)\n"); #ifndef OPENSSL_NO_ENGINE BIO_printf(bio_err," -engine e use engine e, possibly a hardware device.\n"); #endif Index: openssl-1.0.1i/apps/gendh.c =================================================================== --- openssl-1.0.1i.orig/apps/gendh.c 2015-06-12 13:16:47.629625812 +0200 +++ openssl-1.0.1i/apps/gendh.c 2015-06-12 13:17:54.615474034 +0200 @@ -78,7 +78,7 @@ #include <openssl/x509.h> #include <openssl/pem.h> -#define DEFBITS 512 +#define DEFBITS 2048 #undef PROG #define PROG gendh_main
