From a724e68b64484eb796a831f3262a314a3d069d15 Mon Sep 17 00:00:00 2001
From: Stefan Schwarzer <sschwarzer@sschwarzer.net>
Date: Sat, 10 Jul 2021 13:08:28 +0200
Subject: [PATCH] Use larger key size in Makefile

With the default key size of 1024, when I start the server with
`make compile run`, I see several stacktraces with the message

  #<thread:'package-change-handler>
  *** DAEMON CRASHED: main-web-server-thread ***
  ssl-load-certificate-chain!: load failed from: #<path:/home/schwa/sd/racket/racket-pkg-website/src/../server-cert.pem> (error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small)
    context...:

https://github.com/jfromaniello/selfsigned/issues/33 suggests increasing
the key size to at least 2048 bits. Increasing the key size in the
Makefile makes the above stacktraces go away.

I set the key size in the Makefile to 4096 to make it more
"future-proof", but feel free to use a key size of 2048, which works for
me as well.
---
 Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index ef99042..bc54367 100644
--- a/Makefile
+++ b/Makefile
@@ -25,7 +25,7 @@ clean:
 keys: private-key.pem server-cert.pem
 
 private-key.pem:
-	openssl genrsa -des3 -passout pass:dummy -out $@ 1024
+	openssl genrsa -des3 -passout pass:dummy -out $@ 4096
 	openssl rsa -passin pass:dummy -in $@ -out $@
 
 server-cert.pem: private-key.pem