Koozali.org: home of the SME Server

[solved] 2048 bit custom certificiate

Offline kruhm

  • *
  • 680
  • +0/-0
[solved] 2048 bit custom certificiate
« on: July 29, 2013, 01:36:14 AM »
Hi Everyone,

I'm renewing my commercial certificate and following the instructions here:
http://wiki.contribs.org/Custom_CA_Certificate

Upon executing, the CSR generated is only 1024 bit and not 2048. The CONFIG file has 2048 set.

Any ideas on generating a correct 2048 CSR?

Thanks in advance,
« Last Edit: August 04, 2013, 05:29:17 PM by kruhm »

Offline _alex

  • ****
  • 103
  • +0/-0
Re: 2048 bit custom certificiate
« Reply #1 on: July 29, 2013, 02:10:20 AM »
Code: [Select]
openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr

Offline Jáder

  • *
  • 1,099
  • +0/-0
    • LinuxFacil
Re: 2048 bit custom certificiate
« Reply #2 on: August 01, 2013, 12:45:19 PM »
That´s odd! I just used same page to generate SSL cert to https://zanella.adv.br and it´s 2048!
You can go to that URL and confirm it!

Jáder
...

Offline kruhm

  • *
  • 680
  • +0/-0
Re: 2048 bit custom certificiate
« Reply #3 on: August 04, 2013, 12:54:36 PM »
It looks like if there is a key already, the script uses existing key to generate the CSR. Since the existing key was only 1024 bit, the CSR was only 1024 bit.

-renamed the existing key.
-re-run the script.
-CSR created correctly.

Thanks for response.

Offline Jáder

  • *
  • 1,099
  • +0/-0
    • LinuxFacil
Re: 2048 bit custom certificiate
« Reply #4 on: August 04, 2013, 02:34:02 PM »
ok. You're welcome.

Maybe we should update doc (wiki) about this!
And please add [Solved] to subject.

Jáder
...