From 78f63128ef0ee0cbec7c334e50131afc188592ac Mon Sep 17 00:00:00 2001
From: "Alan T. DeKok" <aland@freeradius.org>
Date: Thu, 29 Jun 2017 07:52:57 -0400
Subject: [PATCH] default to using 2048 bit keys

---
 raddb/certs/bootstrap | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/raddb/certs/bootstrap b/raddb/certs/bootstrap
index c9d939b..0f719aa 100755
--- a/raddb/certs/bootstrap
+++ b/raddb/certs/bootstrap
@@ -32,7 +32,7 @@ fi
 #  re-generate these commands.
 #
 if [ ! -f dh ]; then
-  openssl dhparam -out dh 1024 || exit 1
+  openssl dhparam -out dh 2048 || exit 1
   if [ -e /dev/urandom ] ; then
 	ln -sf /dev/urandom random
   else
-- 
2.1.4