From b0724c97eae711a8b144d99852814a080352ca51 Mon Sep 17 00:00:00 2001
From: Romain Dessort <rdessort@evolix.fr>
Date: Tue, 15 Oct 2013 12:12:37 +0200
Subject: [PATCH] Change generated private key length to 2048 bits.

---
 shellpki.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/shellpki.sh b/shellpki.sh
index a4b8e34..d14c97c 100755
--- a/shellpki.sh
+++ b/shellpki.sh
@@ -30,7 +30,7 @@ init() {
     if [ ! -f $PREFIX/files/ca/serial ]; then echo 01 > $PREFIX/ca/serial; fi
 
 $OPENSSL dhparam -out $PREFIX/ca/dh1024.pem 1024
-$OPENSSL genrsa  -out $PREFIX/ca/private.key 1024
+$OPENSSL genrsa  -out $PREFIX/ca/private.key 2048
 
 $OPENSSL req            	    \
     -config $CONFFILE		    \
@@ -61,13 +61,13 @@ create() {
     mkdir $DIR
 
 # generate private key
-$OPENSSL genrsa -out $DIR/$cn.key 1024
+$OPENSSL genrsa -out $DIR/$cn.key 2048
 
 # generate csr req
 $OPENSSL req 		\
     -new -days 1000 	\
     -config $CONFFILE 	\
-    -newkey rsa:1024 	\
+    -newkey rsa:2048 	\
     -nodes 		\
     -keyout $DIR/$cn.key \
     -out $DIR/$cn.csr