[proxy] github.com — ← back | site home | direct (HTTPS) ↗ | proxy home | ◑ dark◐ light
/ cpython Public

Conversation

Copy link
Member

tiran commented Aug 14, 2018 •
edited by bedevere-bot
Loading

Downstream vendors have started to deprecate weak keys. Update all RSA keys
and DH params to use at least 2048 bits.

Finite field DH param file use RFC 7919 values, generated with

certtool --get-dh-params --sec-param=high

Signed-off-by: Christian Heimes christian@python.org.
(cherry picked from commit 88bfd0b)

Co-authored-by: Christian Heimes christian@python.org

https://bugs.python.org/issue34399

bedevere-bot mentioned this pull request Aug 14, 2018
Merged
tiran force-pushed the backport-88bfd0b-3.6 branch from 64df8ea to 0804d8c Compare August 14, 2018 13:39
[3.6] bpo-34399: 2048 bits RSA keys and DH params (pythonGH-8762)
c42b5ac 
Downstream vendors have started to deprecate weak keys. Update all RSA keys
and DH params to use at least 2048 bits.

Finite field DH param file use RFC 7919 values, generated with

    certtool --get-dh-params --sec-param=high

Signed-off-by: Christian Heimes <christian@python.org>.
(cherry picked from commit 88bfd0b)

Co-authored-by: Christian Heimes <christian@python.org>
tiran force-pushed the backport-88bfd0b-3.6 branch from 0804d8c to c42b5ac Compare August 14, 2018 14:43
tiran merged commit 5e9551b into python:3.6 Aug 15, 2018
tiran deleted the backport-88bfd0b-3.6 branch August 15, 2018 07:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants