Skip to content

Replace 512-bit DSA test key with a 1024-bit key - #276

Merged
ohemorange merged 1 commit into
certbot:mainfrom
reaperhulk:claude/dsa-key-1024-upgrade-mf8lqm
Jul 6, 2026
Merged

Replace 512-bit DSA test key with a 1024-bit key#276
ohemorange merged 1 commit into
certbot:mainfrom
reaperhulk:claude/dsa-key-1024-upgrade-mf8lqm

Conversation

@reaperhulk

Copy link
Copy Markdown
Contributor

An upcoming pyca/cryptography change will reject 512-bit DSA keys. Regenerate the test vector at 1024 bits, rename it to dsa1024_key.pem, and update the test and README references.

Newer OpenSSL versions refuse to generate or work with 512-bit DSA
keys. Regenerate the test vector at 1024 bits, rename it to
dsa1024_key.pem, and update the test and README references.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016SvV1bxwRyRs9X16UXKjgE
@reaperhulk
reaperhulk requested a review from a team as a code owner July 4, 2026 14:31
@reaperhulk
reaperhulk requested a review from wgreenberg July 4, 2026 14:31

@wgreenberg wgreenberg left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good looking out, thanks!

@wgreenberg
wgreenberg requested a review from ohemorange July 6, 2026 17:48
@ohemorange
ohemorange merged commit ff8c571 into certbot:main Jul 6, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants