default to using 2048 bit keys

diff --git a/raddb/certs/bootstrap b/raddb/certs/bootstrap
index c9d939b..0f719aa 100755 (executable)
--- a/raddb/certs/bootstrap
+++ b/raddb/certs/bootstrap
@@ -32,7 +32,7 @@ fi
 #  re-generate these commands.
 #
 if [ ! -f dh ]; then
-  openssl dhparam -out dh 1024 || exit 1
+  openssl dhparam -out dh 2048 || exit 1
   if [ -e /dev/urandom ] ; then
        ln -sf /dev/urandom random
   else