From 912cfa7e7644cb6ba975c4d346e45fc4f10a589d Mon Sep 17 00:00:00 2001 From: MiWCryptAnalytics Date: Sat, 15 Apr 2017 11:52:59 -0400 Subject: [PATCH] Increase CA key entropy to 128bit Changes the default CA key size from 48 bit to 128bit with OpenSSL usermode CSPRNG with hex encoding --- roles/vpn/tasks/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/vpn/tasks/main.yml b/roles/vpn/tasks/main.yml index 5ec7f3db..006479d7 100644 --- a/roles/vpn/tasks/main.yml +++ b/roles/vpn/tasks/main.yml @@ -8,7 +8,7 @@ - name: Generate password for the CA key shell: > - openssl rand -hex 6 + openssl rand -hex 16 register: CA_password - set_fact: