commit: 61b32fda7179ecb82188d83f867e1360dff05da6 Author: Ulrich Müller <ulm <AT> gentoo <DOT> org> AuthorDate: Tue Sep 9 21:33:03 2025 +0000 Commit: Ulrich Müller <ulm <AT> gentoo <DOT> org> CommitDate: Tue Sep 9 21:38:54 2025 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=61b32fda
mail-filter/opendkim: Increase keysize to 2048 bits As recommended by RFC 8301 section 3.2: Signers MUST use RSA keys of at least 1024 bits for all keys. Signers SHOULD use RSA keys of at least 2048 bits. Closes: https://bugs.gentoo.org/962174 Acked-by: Michael Orlitzky <mjo <AT> gentoo.org> Signed-off-by: Ulrich Müller <ulm <AT> gentoo.org> .../opendkim/{opendkim-2.10.3-r34.ebuild => opendkim-2.10.3-r35.ebuild} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mail-filter/opendkim/opendkim-2.10.3-r34.ebuild b/mail-filter/opendkim/opendkim-2.10.3-r35.ebuild similarity index 99% rename from mail-filter/opendkim/opendkim-2.10.3-r34.ebuild rename to mail-filter/opendkim/opendkim-2.10.3-r35.ebuild index a6e14d6605e9..278461d48f09 100644 --- a/mail-filter/opendkim/opendkim-2.10.3-r34.ebuild +++ b/mail-filter/opendkim/opendkim-2.10.3-r35.ebuild @@ -226,7 +226,7 @@ pkg_config() { if [[ -f "${ROOT}/var/lib/opendkim/${selector}.private" ]]; then ewarn "The private key for this selector already exists." else - keysize=1024 + keysize=2048 # Generate the private and public keys. Note that opendkim-genkeys # sets umask=077 on its own to keep these safe. However, we want # them to be readable (only!) to the opendkim user, and we manage
