From: Toke Høiland-Jørgensen <redacted>
Date: Tue, 8 Jan 2019 12:07:06 +0000 (+0100)
Subject: acme: Remove 8192 bits certificate option
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=71c7d30e0062bff7adc93878a44513b185b7a40e;p=openwrt-packages.git

acme: Remove 8192 bits certificate option

This is not supported by letsencrypt, so issuing the certificate will fail.
Instead, add 3072 bits as an intermediate option.

Signed-off-by: Toke Høiland-Jørgensen <redacted>
---

diff --git a/net/acme/Makefile b/net/acme/Makefile
index 112e56669..3feb74478 100644
--- a/net/acme/Makefile
+++ b/net/acme/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=acme
 PKG_VERSION:=2.7.9
-PKG_RELEASE:=5
+PKG_RELEASE:=6
 PKG_LICENSE:=GPLv3
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
diff --git a/net/acme/files/acme-cbi.lua b/net/acme/files/acme-cbi.lua
index 3b02f48ab..cb469b9d6 100644
--- a/net/acme/files/acme-cbi.lua
+++ b/net/acme/files/acme-cbi.lua
@@ -56,8 +56,8 @@ us.rmempty = false
 kl = cs:option(ListValue, "keylength", translate("Key size"),
                translate("Key size (and type) for the generated certificate."))
 kl:value("2048", "RSA 2048 bits")
+kl:value("3072", "RSA 3072 bits")
 kl:value("4096", "RSA 4096 bits")
-kl:value("8192", "RSA 8192 bits")
 kl:value("ec-256", "ECC 256 bits")
 kl:value("ec-384", "ECC 384 bits")
 kl.default = "2048"