Re: [Ejbca-develop] Changing the size of a CA key ?

[eilaf m. <eil...@gm...>]

Hi,


If you are not talking about a production environment, I mean just to test,
and you are talking about the CA that is build during the installation of
EJBCA, you can go to the configuration file "ejbca.properties" then
#ca.keyspec=2048   and specify the size of the key you want. by default it's
2048.




Regards,
Eilaf

On Fri, May 20, 2011 at 3:21 PM, Steph1O2OO <ste...@fr...> wrote:

> Hi,
>
> Yes, I use soft keystore
>
> I opened the JKS keystore, and I looked at the certificate CN = dummy,
> but I tell myself that if I recreate the certificate with a larger key
> size, are what it's going to work?
>
> Is this the right way?
>
>
> Thanks
>
> Stéphane.
>
>
> ----- Mail Original -----
> De: "Tomas Gustavsson" <to...@pr...>
> À: ejb...@li...
> Envoyé: Jeudi 19 Mai 2011 14h20:58 GMT +01:00 Amsterdam / Berlin / Berne /
> Rome / Stockholm / Vienne
> Objet: Re: [Ejbca-develop] Changing the size of a CA key ?
>
>
> Hi,
>
> I assume you are using soft keystore. In "Edit CA" it is then not
> possible to change key size, and this is the place that determines the
> keys generated during renewal.
> No easy workaround, apart from either modifying the database directly or
> writing a small program that makes the configuration change (it's
> possible programatically).
>
> If you were using an HSM you simply generate a new key on the HSM with
> desired size.
>
> Cheers,
> Tomas
>
> On 05/19/2011 10:53 AM, Steph1O2OO wrote:
> > Hi,
> >
> > I just know it is possible to change the size of a key of a CA
> (2048->4096). I tried to renew the ac, with the keys, but despite that I
> have modified the profile for this AC is always the same size after
> regeneration.
> >
> > It's probably normal, I just get confirmation before any duty again.
> >
> >
> >
> > Thank you.
> >
> >
> >
> > Stephane
> >
> >
> ------------------------------------------------------------------------------
> > What Every C/C++ and Fortran developer Should Know!
> > Read this article and learn how Intel has extended the reach of its
> > next-generation tools to help Windows* and Linux* C/C++ and Fortran
> > developers boost performance applications - including clusters.
> > http://p.sf.net/sfu/intel-dev2devmay
> > _______________________________________________
> > Ejbca-develop mailing list
> > Ejb...@li...
> > https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>
>
> ------------------------------------------------------------------------------
> What Every C/C++ and Fortran developer Should Know!
> Read this article and learn how Intel has extended the reach of its
> next-generation tools to help Windows* and Linux* C/C++ and Fortran
> developers boost performance applications - including clusters.
> http://p.sf.net/sfu/intel-dev2devmay
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>
>
> ------------------------------------------------------------------------------
> What Every C/C++ and Fortran developer Should Know!
> Read this article and learn how Intel has extended the reach of its
> next-generation tools to help Windows* and Linux* C/C++ and Fortran
> developers boost performance applications - including clusters.
> http://p.sf.net/sfu/intel-dev2devmay
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>
>


-- 
Eilaf Hamad Elnil Mugbil
University Of Khartoum
School Of Mathematical science