[pve-devel] [PATCH cluster] ssh: default to 4096 bit keys when generating

Fabian Grünbichler f.gruenbichler at proxmox.com
Thu Dec 21 10:46:09 CET 2023


Signed-off-by: Fabian Grünbichler <f.gruenbichler at proxmox.com>
---
 src/PVE/Cluster/Setup.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/PVE/Cluster/Setup.pm b/src/PVE/Cluster/Setup.pm
index 07020d7..4b12bb8 100644
--- a/src/PVE/Cluster/Setup.pm
+++ b/src/PVE/Cluster/Setup.pm
@@ -157,7 +157,7 @@ sub setup_rootsshconfig {
     # create ssh key if it does not exist
     if (! -f $ssh_root_rsa_key_public) {
 	mkdir '/root/.ssh/';
-	system ("echo|ssh-keygen -t rsa -N '' -b 2048 -f ${ssh_root_rsa_key_private}");
+	system ("echo|ssh-keygen -t rsa -N '' -b 4096 -f ${ssh_root_rsa_key_private}");
     }
 
     # create ssh config if it does not exist
-- 
2.39.2





More information about the pve-devel mailing list