Skip to content
Snippets Groups Projects
  • Guy Halse's avatar
    Update OpenSSL RSA bit length in docs · 4da9282c
    Guy Halse authored
    Change documentation from recommending 2048 bit keys to using 3072 bit
    keys.
    
    Given that we're recommending people generate ten-year keys, 2048 bit
    keys are probably a bit short. Almost all commercial certificate
    authorities now recommend 4096 bit keys, and eduGAIN requires 3072 bit
    keys for new federations.
    
    This change aligns the SimpleSAMLphp documentation with the lower
    eduGAIN requirement, since that still meets most standards bodies
    recommendations for 2028 (ten years from now). cf
    https://www.keylength.com/
    4da9282c
Code owners
Assign users and groups as approvers for specific file changes. Learn more.