From f852a3358c4bb825fad71c1017c0d71898c5a47c Mon Sep 17 00:00:00 2001 From: ThanhNguyxn Date: Fri, 13 Feb 2026 01:51:10 -0500 Subject: [PATCH] Fix GH-20175: update OpenSSL test default_bits to 2048 OpenSSL 3.2+ defaults to security level 2, which rejects 1024-bit keys. Update the test helper config to use 2048-bit default key size so ext/openssl tests relying on generated config remain compatible. --- ext/openssl/tests/CertificateGenerator.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ext/openssl/tests/CertificateGenerator.inc b/ext/openssl/tests/CertificateGenerator.inc index 6fd73e0e9bed1..0665b0a737f61 100644 --- a/ext/openssl/tests/CertificateGenerator.inc +++ b/ext/openssl/tests/CertificateGenerator.inc @@ -102,7 +102,7 @@ class CertificateGenerator [ req ] distinguished_name = req_distinguished_name default_md = sha256 -default_bits = 1024 +default_bits = 2048 [ req_distinguished_name ]