Skip to content

Commit

Permalink
OXT-389: use a bigger RSA certificate to match the bigger key
Browse files Browse the repository at this point in the history
Signed-off-by: Jed <[email protected]>
  • Loading branch information
jean-edouard committed Nov 12, 2015
1 parent ec585b1 commit 4cc393a
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions part2/stages/Set-password
Original file line number Diff line number Diff line change
Expand Up @@ -131,13 +131,14 @@ else
exit ${Abort}
fi

dialog --infobox "Generating RSA keys, please wait..." 3 40
if [ "${PLAIN_TEXT_PASSWORD}" ] ; then

# Generate recovery public/private key using plain text password
# as a passphrase.
echo -n "${PLAIN_TEXT_PASSWORD}" | \
openssl genrsa -des3 -out "${RECOVERY_PRIVATE_KEY_CONF}" \
-passout stdin 2048 || \
-passout stdin 8192 || \
exit ${Abort}

echo -n "${PLAIN_TEXT_PASSWORD}" | \
Expand All @@ -148,7 +149,7 @@ else
elif [ "${DEFER_PASSWORD}" = "true" ] ; then

# Generate recovery public/private key without a passphrase.
openssl genrsa -out "${RECOVERY_PRIVATE_KEY_CONF}" 2048 || \
openssl genrsa -out "${RECOVERY_PRIVATE_KEY_CONF}" 8192 || \
exit ${Abort}

openssl rsa -pubout -out "${RECOVERY_PUBLIC_KEY_CONF}" \
Expand Down

0 comments on commit 4cc393a

Please sign in to comment.