修改公钥长度为2048, 复制原证书的过期时间

This commit is contained in:
崔一鸣
2019-07-19 17:42:36 +08:00
parent 1b13ef037c
commit a7586a38ca
2 changed files with 42 additions and 3 deletions

View File

@@ -337,7 +337,8 @@ static long keyring_local_cache_query_cb(void * data, const uchar * key, uint si
static struct keyring_private* generate_x509_keyring(X509* origin_cert, X509* ca, EVP_PKEY* cakey)
{
//TODO: could be optimized to save cpu.
EVP_PKEY* forge_key = ssl_key_genrsa(1024);
EVP_PKEY* forge_key = ssl_key_genrsa(2048);
X509* forge_cert = ssl_x509_forge(ca, cakey, origin_cert, forge_key, NULL, NULL);
STACK_OF(X509)* chain = sk_X509_new_null();
sk_X509_push(chain, ca);