From 23a2bc228b6559465fe999d729798a1e85d07546 Mon Sep 17 00:00:00 2001
From: trimstray <trimstray@gmail.com>
Date: Tue, 25 Dec 2018 12:14:19 +0100
Subject: [PATCH] #34 - security of 3des for openssl - signed-off-by: trimstray
 <trimstray@gmail.com>

---
 README.md | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index 4704183..7be3f34 100644
--- a/README.md
+++ b/README.md
@@ -1289,8 +1289,9 @@ openssl s_client -cipher 'AES128-SHA' -connect google.com:443
 ###### Generate private key
 
 ```bash
-# _ciph: des3, aes
-( _ciph="des3" ; _fd="private.key" ; _len="2048" ; \
+# _ciph: des3, aes128, aes256
+# _len: 2048, 4096
+( _ciph="aes128" ; _fd="private.key" ; _len="4096" ; \
 openssl genrsa -${_ciph} -out ${_fd} ${_len} )
 ```
 
@@ -1311,7 +1312,7 @@ openssl rsa -pubout -in ${_fd} -out ${_fd_pub} )
 ###### Generate private key + csr
 
 ```bash
-( _fd="private.key" ; _fd_csr="request.csr" ; _len="2048" ; \
+( _fd="private.key" ; _fd_csr="request.csr" ; _len="4096" ; \
 openssl req -out ${_fd_csr} -new -newkey rsa:${_len} -nodes -keyout ${_fd} )
 ```