[gentoo-commits] repo/gentoo:master commit in: mail-filter/opendkim/

["Ulrich Müller" <ulm@gentoo.org>]

commit:     61b32fda7179ecb82188d83f867e1360dff05da6
Author:     Ulrich Müller <ulm <AT> gentoo <DOT> org>
AuthorDate: Tue Sep  9 21:33:03 2025 +0000
Commit:     Ulrich Müller <ulm <AT> gentoo <DOT> org>
CommitDate: Tue Sep  9 21:38:54 2025 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=61b32fda

mail-filter/opendkim: Increase keysize to 2048 bits

As recommended by RFC 8301 section 3.2:

  Signers MUST use RSA keys of at least 1024 bits for all keys.
  Signers SHOULD use RSA keys of at least 2048 bits.

Closes: https://bugs.gentoo.org/962174
Acked-by: Michael Orlitzky <mjo <AT> gentoo.org>
Signed-off-by: Ulrich Müller <ulm <AT> gentoo.org>

 .../opendkim/{opendkim-2.10.3-r34.ebuild => opendkim-2.10.3-r35.ebuild} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mail-filter/opendkim/opendkim-2.10.3-r34.ebuild b/mail-filter/opendkim/opendkim-2.10.3-r35.ebuild
similarity index 99%
rename from mail-filter/opendkim/opendkim-2.10.3-r34.ebuild
rename to mail-filter/opendkim/opendkim-2.10.3-r35.ebuild
index a6e14d6605e9..278461d48f09 100644
--- a/mail-filter/opendkim/opendkim-2.10.3-r34.ebuild
+++ b/mail-filter/opendkim/opendkim-2.10.3-r35.ebuild
@@ -226,7 +226,7 @@ pkg_config() {
 	if [[ -f "${ROOT}/var/lib/opendkim/${selector}.private" ]]; then
 		ewarn "The private key for this selector already exists."
 	else
-		keysize=1024
+		keysize=2048
 		# Generate the private and public keys. Note that opendkim-genkeys
 		# sets umask=077 on its own to keep these safe. However, we want
 		# them to be readable (only!) to the opendkim user, and we manage