From: Emilia Kasper <emilia@openssl.org>
Date: Wed, 13 May 2015 09:57:55 +0000 (+0200)
Subject: dhparam: set the default to 2048 bits
X-Git-Tag: OpenSSL_1_0_1n~57
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=8568170d774f02880eec6cad5512f555d0c83f65;p=oweals%2Fopenssl.git

dhparam: set the default to 2048 bits

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
---

diff --git a/apps/dhparam.c b/apps/dhparam.c
index f86311c28f..d3b6d58ad2 100644
--- a/apps/dhparam.c
+++ b/apps/dhparam.c
@@ -130,7 +130,7 @@
 # undef PROG
 # define PROG    dhparam_main
 
-# define DEFBITS 512
+# define DEFBITS 2048
 
 /*-
  * -inform arg  - input format - default PEM (DER or PEM)
@@ -254,7 +254,7 @@ int MAIN(int argc, char **argv)
         BIO_printf(bio_err,
                    " -5            generate parameters using  5 as the generator value\n");
         BIO_printf(bio_err,
-                   " numbits       number of bits in to generate (default 512)\n");
+                   " numbits       number of bits in to generate (default 2048)\n");
 # ifndef OPENSSL_NO_ENGINE
         BIO_printf(bio_err,
                    " -engine e     use engine e, possibly a hardware device.\n");
diff --git a/apps/gendh.c b/apps/gendh.c
index adaa101783..fef6f1b177 100644
--- a/apps/gendh.c
+++ b/apps/gendh.c
@@ -80,7 +80,7 @@
 # include <openssl/x509.h>
 # include <openssl/pem.h>
 
-# define DEFBITS 512
+# define DEFBITS 2048
 # undef PROG
 # define PROG gendh_main