Re: [exim] 8192 length SSL keys

2021-04-13 Thread Dennis Davis via Exim-users
On Mon, 12 Apr 2021, Viktor Dukhovni via Exim-users wrote: > From: Viktor Dukhovni via Exim-users > To: exim-users@exim.org > Cc: Viktor Dukhovni > Date: Mon, 12 Apr 2021 17:01:27 -0400 > Subject: Re: [exim] 8192 length SSL keys > > On Mon, Apr 12, 2021 at 02:39:41PM -0600

Re: [exim] 8192 length SSL keys

2021-04-12 Thread The Doctor via Exim-users
On Mon, Apr 12, 2021 at 10:53:46PM +0100, Jeremy Harris via Exim-users wrote: > On 12/04/2021 21:39, The Doctor via Exim-users wrote: > > Does Exim support 8192 bit SSL keys? > > Nothing works until it's been tried, and I've not > personally tested 8k (or even 4k) keys in certs. > The regression t

Re: [exim] 8192 length SSL keys

2021-04-12 Thread Jeremy Harris via Exim-users
On 12/04/2021 21:39, The Doctor via Exim-users wrote: Does Exim support 8192 bit SSL keys? Nothing works until it's been tried, and I've not personally tested 8k (or even 4k) keys in certs. The regression tests use 2k key for RSA and (it looks like) a nistp521 key for EC. I can't comment on ot

Re: [exim] 8192 length SSL keys

2021-04-12 Thread Viktor Dukhovni via Exim-users
On Mon, Apr 12, 2021 at 02:39:41PM -0600, The Doctor via Exim-users wrote: > Does Exim support 8192 bit SSL keys? Even 4096-bit RSA keys are noticeably slow/bulky, none of the public CAs are using anything stronger than 4096-bit RSA keys and most are using 2048. Why on earth would you want 8192