8178466: Better RSA parameters
authorvaleriep
Thu, 31 Aug 2017 21:44:19 +0000
changeset 48572 1820a65c4e59
parent 48571 cd23d1f99660
child 48573 e6b173e04545
8178466: Better RSA parameters Reviewed-by: mullan, ahgross
src/java.base/share/classes/sun/security/tools/keytool/Main.java
src/java.base/share/classes/sun/security/util/SecurityProviderConstants.java
--- a/src/java.base/share/classes/sun/security/tools/keytool/Main.java	Thu Aug 24 19:18:51 2017 +0000
+++ b/src/java.base/share/classes/sun/security/tools/keytool/Main.java	Thu Aug 31 21:44:19 2017 +0000
@@ -1804,8 +1804,7 @@
             } else if ("RSA".equalsIgnoreCase(keyAlgName)) {
                 keysize = SecurityProviderConstants.DEF_RSA_KEY_SIZE;
             } else if ("DSA".equalsIgnoreCase(keyAlgName)) {
-                // hardcode for now as DEF_DSA_KEY_SIZE is still 1024
-                keysize = 2048; // SecurityProviderConstants.DEF_DSA_KEY_SIZE;
+                keysize = SecurityProviderConstants.DEF_DSA_KEY_SIZE;
             }
         }
 
--- a/src/java.base/share/classes/sun/security/util/SecurityProviderConstants.java	Thu Aug 24 19:18:51 2017 +0000
+++ b/src/java.base/share/classes/sun/security/util/SecurityProviderConstants.java	Thu Aug 31 21:44:19 2017 +0000
@@ -64,7 +64,7 @@
     static {
         String keyLengthStr = GetPropertyAction.privilegedGetProperty
             (KEY_LENGTH_PROP);
-        int dsaKeySize = 1024;
+        int dsaKeySize = 2048;
         int rsaKeySize = 2048;
         int dhKeySize = 2048;
         int ecKeySize = 256;