luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity

Vault SSH: 1024 is default key size and removed 4096

This commit is contained in:
vishalnayak 2015-08-19 12:51:33 -07:00
parent c283e34f8c
commit 76ed3bec74
2 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
builtin/logical/ssh/path_roles.go
View File

@ -90,7 +90,7 @@ func pathRoles(b *backend) *framework.Path {
Type: framework.TypeInt,
Description: `
[Optional for Dynamic type] [Not applicable for OTP type]
Length of the RSA dynamic key in bits. It can be one of 1024, 2048 or 4096.`,
Length of the RSA dynamic key in bits. It is 1024 by default or it can be 2048.`,
},
"install_script": &framework.FieldSchema{
Type: framework.TypeString,
@ -201,15 +201,15 @@ func (b *backend) pathRoleWrite(req *logical.Request, d *framework.FieldData) (*
return logical.ErrorResponse("Missing admin username"), nil
}
// Key bits can only be 1024, 2048 or 4096.
// This defaults to 1024 and it can also be 2048.
keyBits := d.Get("key_bits").(int)
if keyBits != 0 && keyBits != 1024 && keyBits != 2048 && keyBits != 4096 {
if keyBits != 0 && keyBits != 1024 && keyBits != 2048 {
return logical.ErrorResponse("Invalid key_bits field"), nil
}
// If user has not set this field, default it to 2048
// If user has not set this field, default it to 1024
if keyBits == 0 {
keyBits = 2048
keyBits = 1024
}
// Store all the fields required by dynamic key type

2
website/source/docs/secrets/ssh/index.html.md
View File

@ -459,7 +459,7 @@ username@ip:~$
<span class="param">key_bits</span>
<span class="param-flags">optional for Dynamic type, NA for OTP type</span>
(Integer)
Length of the RSA dynamic key in bits. It can be one of 1024, 2048 or 4096.
Length of the RSA dynamic key in bits. It is 1024 by default or it can be 2048.
</li>
<li>
<span class="param">install_script</span>