2048-bit CSRs

[movielad]

Hello,

I have a customer who has generated through WHM a CSR for his account. Unfortunately his SSL registrar has come back to say:

* Public key size must be at least 2048 bits.
* The CSR you submitted has a 1024 bit key size.
The EV guidelines do not allow us to issue an EV certificate with a CSR less
than 2048 bits.
You must generate a new CSR that has a 2048 bit or higher key size.

I thought cPanel's SSL manager generated 2048 bit requests by default. The customer is running Centos 4 64-bit.

[EWD]

Same issue here.
Anyone have any ideas on this?

[EWD]

Does not look like cpanel/whm supports this so I have created an enhancement request at http://bugzilla.cpanel.net/show_bug.cgi?id=8433

Everyone should vote on this in order to get cpanel to consider implementing it.

Geotrust started with this new rule and I am pretty sure other SSL vendors will follow suit so this is important.

[EWD]

In the meantime you can generate both the key and CSR via command line

First do:
openssl genrsa -out domainname.com.key 2048

Then do:
openssl req -new -key domainname.com.key -out domainname.com.csr

[cPanelKenneth]

This feature is added to our internal builds. Future cPanel 11.24 builds should have this for both the WHM and cPanel SSL interfaces.

[EWD]

cpanelkenneth,
Awesome, thanks.

Happy New Year