Issued leaf keys are hard-coded to RSA 1024, and certificates are valid for 10 years #5

New issue

Closed

opened 2026-10-26 20:23:16 +00:00 by mikluko · 0 comments

mikluko commented

2026-10-26 20:23:16 +00:00

Owner

SelfSignedCA.Issue in pkg/issuer/issuer.go calls rsa.GenerateKey(ca.Rand, 1024), ignoring the BitSize field, whose default DefaultIssuerBitSize is 1024 as well. NotAfter is set ten years ahead.

Platform verifiers reject such certificates: Apple requires RSA keys of at least 2048 bits and a validity of at most 825 days for TLS server certificates, and Go on macOS verifies through the platform.

honour BitSize, default 2048
offer ECDSA P-256 leaf keys, cheaper to generate per host
a short default validity for leaves, configurable

`SelfSignedCA.Issue` in `pkg/issuer/issuer.go` calls `rsa.GenerateKey(ca.Rand, 1024)`, ignoring the `BitSize` field, whose default `DefaultIssuerBitSize` is 1024 as well. `NotAfter` is set ten years ahead. Platform verifiers reject such certificates: Apple requires RSA keys of at least 2048 bits and a validity of at most 825 days for TLS server certificates, and Go on macOS verifies through the platform. - honour `BitSize`, default 2048 - offer ECDSA P-256 leaf keys, cheaper to generate per host - a short default validity for leaves, configurable

mikluko added the

bug

label

2026-10-26 20:23:16 +00:00

mikluko referenced this issue from a commit

2026-10-26 20:54:54 +00:00

Issued keys honour BitSize, offer ECDSA, and expire after 30 days

mikluko referenced this issue from a pull request that will close it,

2026-10-26 20:55:01 +00:00

Leaf keys: honour BitSize, offer ECDSA, 30-day validity #29

mikluko closed this issue

2026-10-26 20:56:04 +00:00