puppetlabs/puppet — pull request #498 by daniel-pittman (2012-02-15 01:04:58+00:00)
Title: Bug/2.7.x/6663 increase default key length

The CA key length was lower than it should be - 1024 bits is no longer secure
enough for real world use. This raises both client and CA certs to use 4096
bit keys. Those are slow, but effective for long term security.

People who know enough to decide that the trade-off of speed vs limited window
of security can still totally reduce the size of the key without much trouble,
but we default to being more cautious.

This also pegs the key lengths low in testing, since building a 4K key is
awful slow if you want to do it time and time again over the course of dozens
of tests.

Signed-off-by: Daniel Pittman