summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJason McIntyre <jmc@cvs.openbsd.org>2012-05-27 07:04:53 +0000
committerJason McIntyre <jmc@cvs.openbsd.org>2012-05-27 07:04:53 +0000
commit59b6ae2c1c2db1e56eced71ab81491ed5c658df5 (patch)
tree70825048def5ceea9cb25babf7c587cd1361c97f
parente0b9c476edba5a3dea66ab7d6ff0eb99ff4cbfa1 (diff)
revert to recommending a key size of 2048, as requested by naddy
-rw-r--r--share/man/man8/ssl.88
1 files changed, 4 insertions, 4 deletions
diff --git a/share/man/man8/ssl.8 b/share/man/man8/ssl.8
index 1caf3872834..ca4dd886ab8 100644
--- a/share/man/man8/ssl.8
+++ b/share/man/man8/ssl.8
@@ -1,4 +1,4 @@
-.\" $OpenBSD: ssl.8,v 1.49 2012/05/25 19:25:38 jmc Exp $
+.\" $OpenBSD: ssl.8,v 1.50 2012/05/27 07:04:52 jmc Exp $
.\"
.\" Copyright (c) 1999 Theo de Raadt, Bob Beck
.\" All rights reserved.
@@ -23,7 +23,7 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: May 25 2012 $
+.Dd $Mdocdate: May 27 2012 $
.Dt SSL 8
.Os
.Sh NAME
@@ -110,13 +110,13 @@ you will need to generate an
.Ar RSA
certificate.
.Bd -literal -offset indent
-# openssl genrsa -out /etc/ssl/private/server.key 4096
+# openssl genrsa -out /etc/ssl/private/server.key 2048
.Ed
.Pp
Or, if you wish the key to be encrypted with a passphrase that you will
have to type in when starting servers
.Bd -literal -offset indent
-# openssl genrsa -aes256 -out /etc/ssl/private/server.key 4096
+# openssl genrsa -aes256 -out /etc/ssl/private/server.key 2048
.Ed
.Pp
The next step is to generate a