* gpg: Allow for signature subpackets of up to 30000 octets. [rG36dbca3e69] * gpg: Silence expired trusted-key diagnostics in quiet mode. [T7351] * gpg: Allow smaller session keys with Kyber and enforce the use of AES-256 if useful. [T7472] * gpg: Fix regression in key generation from existing card key. [T7309,T7457] * gpg: Print a warning if the card backup key could not be written. [T2169] * The --supervised options of gpg-agent and dirmngr have been renamed to --deprecated-supervised as preparation for their removal. [rGa019a0fcd8] * There is no more default for a keyserver. OBS-URL: https://build.opensuse.org/package/show/Base:System/gpg2?expand=0&rev=313
14 lines
411 B
Diff
14 lines
411 B
Diff
Index: gnupg-2.4.0/g10/keygen.c
|
|
===================================================================
|
|
--- gnupg-2.4.0.orig/g10/keygen.c
|
|
+++ gnupg-2.4.0/g10/keygen.c
|
|
@@ -2461,7 +2461,7 @@ get_keysize_range (int algo, unsigned in
|
|
|
|
default:
|
|
*min = opt.compliance == CO_DE_VS ? 2048: 1024;
|
|
- *max = 4096;
|
|
+ *max = opt.flags.large_rsa == 1 ? 8192 : 4096;
|
|
def = 3072;
|
|
break;
|
|
}
|