search for: default_bits

Hello, Just had a query, from security point of view. Shouldn't dovecot-openssl.conf defaults now be 2048 bits? i.e. default_bits = 1024 I have read that 1024 bit certificates are now deprecated, since Dec 31, 2013. So may be we should have default as 2048 and can be changed manually if someone specifically wants 1024 or lower. Regards, A M

...+ if (strcmp(out_file, "-") != 0) { + if ((out = fopen(out_file, "w")) == NULL) { + fatal("Couldn't open modulus candidate file \"%s\": %s", + out_file, strerror(errno)); + } + } else + out = stdout; + if (bits == 0) bits = DEFAULT_BITS; if (gen_candidates(out, memory, bits, start) != 0) @@ -1287,8 +1290,16 @@ main(int ac, char **av) if (do_screen_candidates) { FILE *in; - FILE *out = fopen(out_file, "w"); + FILE *out; + if (strcmp(out_file, "-") != 0) { + if ((out = fopen(out_file, "w&quo...

After building and install dovecot I then made my own self signed SSL certs and placed them carefully into the correct places : Thus : # grep -v "^#" dovecot-openssl.cnf | grep -v "^$" [ req ] default_bits = 1024 encrypt_key = yes distinguished_name = req_dn x509_extensions = cert_type prompt = no [ req_dn ] C=CA ST=Ontario L=Toronto O=Blastwave OU=IMAP server CN=titan.blastwave.org emailAddress=postmaster at blastwave.org [ cert_type ] nsCertType = server # /opt/csw/bin/openssl req -new -x509 -node...

...69B970, 0x7FFEE285F2C8, 0x0, 0x0) = 0 0 918/0x3b12: getrlimit(0x1008, 0x7FFEE285F270, 0x0) = 0 0 918/0x3b12: open_nocancel("/private/etc/ssl/openssl.cnf\0", 0x0, 0x1B6) = 3 0 918/0x3b12: fstat64(0x3, 0x7FFEE285F108, 0x0) = 0 0 918/0x3b12: read_nocancel(0x3, "[ req ]\n#default_bits\t\t= 2048\n#default_md\t\t= sha256\n#default_keyfile \t= privkey.pem\ndistinguished_name\t= req_distinguished_name\nattributes\t\t= req_attributes\n\n[ req_distinguished_name ]\ncountryName\t\t\t= Country Name (2 letter code)\ncountryName_min\t\t\t= 2\ncoun", 0x1000) = 745 0 918/0x3b12: re...

Mac OS X 10.14.2 VirtualBox 5.2.22 and 6.0.0 libvirt installed via homebrew virsh -V Virsh command line tool of libvirt 4.10.0 See web site at https://libvirt.org/ Compiled with support for: Hypervisors: QEMU/KVM VMware VirtualBox ESX Test Networking: Remote Bridging Storage: Dir Miscellaneous: Daemon Secrets Debug brew services start libvirt virsh -c vbox:///session list error: