From 723fab4c819421a9ff299cbb1b74bf5a6928d544 Mon Sep 17 00:00:00 2001 From: Tim Standen <37914436+timbot1789@users.noreply.github.com> Date: Wed, 13 Mar 2024 21:30:59 -0700 Subject: [PATCH] Update continue.scrbl A key of size `1024` is no longer considered long enough to be secure. Running the line `plt-web-server --ssl` throws the following error on recent versions: `ssl-load-certificate-chain!: load failed from: # (error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small)` Bumping the size up to `2048` fixes the error. --- web-server-doc/web-server/scribblings/tutorial/continue.scrbl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/web-server-doc/web-server/scribblings/tutorial/continue.scrbl b/web-server-doc/web-server/scribblings/tutorial/continue.scrbl index e0734f95..2d196cdf 100644 --- a/web-server-doc/web-server/scribblings/tutorial/continue.scrbl +++ b/web-server-doc/web-server/scribblings/tutorial/continue.scrbl @@ -1439,7 +1439,7 @@ Finally, here are instructions for using the server in HTTPS mode. This requires an SSL certificate and a private key. It is also very platform-specific, but here are the details for using OpenSSL on UNIX: -@commandline{openssl genrsa -des3 -out private-key.pem 1024} +@commandline{openssl genrsa -des3 -out private-key.pem 2048} This will generate a new private key, but with a passphrase, which you can remove as follows: