Change CA SSL key size to 4096 bit

diff --git a/data/PVE/Cluster.pm b/data/PVE/Cluster.pm
index 0085316e4d536c67d4e0204a9ddc9c05d30f1d5e..d325f8f1f69f06b0ab82c9cef310f1c83ed54694 100644 (file)
--- a/data/PVE/Cluster.pm
+++ b/data/PVE/Cluster.pm
@@ -165,7 +165,7 @@ sub gen_pveca_key {
     return if -f $pveca_key_fn;
 
     eval {
-       run_silent_cmd(['openssl', 'genrsa', '-out', $pveca_key_fn, '2048']);
+       run_silent_cmd(['openssl', 'genrsa', '-out', $pveca_key_fn, '4096']);
     };
 
     die "unable to generate pve ca key:\n$@" if $@;