[proxy] github.com — ← back | site home | direct (HTTPS) ↗ | proxy home | ◑ dark◐ light
/ cpython Public

Conversation

Copy link
Contributor

miss-islington commented Aug 14, 2018 •
edited by bedevere-bot
Loading

Downstream vendors have started to deprecate weak keys. Update all RSA keys
and DH params to use at least 2048 bits.

Finite field DH param file use RFC 7919 values, generated with

certtool --get-dh-params --sec-param=high

Signed-off-by: Christian Heimes christian@python.org
(cherry picked from commit 88bfd0b)

Co-authored-by: Christian Heimes christian@python.org

https://bugs.python.org/issue34399

bpo-34399: 2048 bits RSA keys and DH params (pythonGH-8762)
46205b7 
Downstream vendors have started to deprecate weak keys. Update all RSA keys
and DH params to use at least 2048 bits.

Finite field DH param file use RFC 7919 values, generated with

    certtool --get-dh-params --sec-param=high

Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit 88bfd0b)

Co-authored-by: Christian Heimes <christian@python.org>
bedevere-bot mentioned this pull request Aug 14, 2018
Merged
Copy link
Contributor Author

miss-islington commented Aug 14, 2018

@tiran: Backport status check is done, and it's a success ✅ .

1 similar comment
Copy link
Contributor Author

miss-islington commented Aug 14, 2018

@tiran: Backport status check is done, and it's a success ✅ .

tiran merged commit e3228a3 into python:3.7 Aug 14, 2018
miss-islington deleted the backport-88bfd0b-3.7 branch August 14, 2018 14:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants