= phenomenon & reason = Right now, fedoraproject.org is having a key size of 1024 at the SSL certificate - which is nearly-weak, some certificate authorities even do no longer accept 1024 bit keys. Other pages, such as *.fedoraproject.org or fedorahosted.org have a key size of 2048 which is better, but not well.
= recommendation = Please use key size of 4096 for new SSL certificates at fedoraproject.org, *.fedoraproject.org, fedorahosted.org and others. That means new keys need to be created before the next renewal of the SSL certificates.
Assigning this to smooge - I think we missed the deadline on getting this ready for wildcard.fp.o, but fedorahosted.org expiration is coming up soon, so we'll at least be able to regenerate those this time around.
Why does this ticket get closed if it's not solved so far?
Oops, I was going going to reopen this - that was an accident.
All of them are now done.
Please let us know if you see any that are not.
Login to comment on this ticket.