56898e8953
Currently 99.99% of RSA keys we see in certificates at Let's Encrypt are either 2048, 3072, or 4096 bits, but we support every 8 bit increment between 2048 and 4096. Supporting these uncommon key sizes opens us up to having to block much larger ranges of keys when dealing with something like the Debian weak keys incident. Instead we should just reduce the set of key sizes we support down to what people actually use. Fixes #4835. |
||
|---|---|---|
| .. | ||
| blocked.go | ||
| blocked_test.go | ||
| good_key.go | ||
| good_key_test.go | ||
| weak.go | ||
| weak_test.go | ||