From 4425049ecc04071bef5cbb66fa12b67bb702867f Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jakub.hrozek@posteo.se>
Date: Oct 03 2018 18:34:28 +0000
Subject: Use 2048-bit keys in tests to enable tests on modern systems


The crypto policies on some modern distributions don't allow 1024-bit
keys. Without this change the LDAP tests won't work on these systems;
OpenLDAP wouldn't start at all with messages like:
    slapd[32441]: main: TLS init def ctx failed: -1
    slapd[32441]: @(#) $OpenLDAP: slapd 2.4.46 (May 11 2018 17:12:39) $

---

diff --git a/tests/default_pw_test b/tests/default_pw_test
index 6da406c..733c85c 100755
--- a/tests/default_pw_test
+++ b/tests/default_pw_test
@@ -30,7 +30,7 @@ rm -rf "$workdir"
 mkdir "$workdir"
 
 # Create a SSL key
-/usr/bin/openssl req -newkey rsa:1024 -keyout "$workdir"/key1 -nodes \
+/usr/bin/openssl req -newkey rsa:2048 -keyout "$workdir"/key1 -nodes \
     -x509 -days 2 -out "$workdir"/key3 2>/dev/null <<EOF
 .
 .
diff --git a/tests/ldap_test b/tests/ldap_test
index f82c279..54609b1 100755
--- a/tests/ldap_test
+++ b/tests/ldap_test
@@ -30,7 +30,7 @@ rm -rf "$workdir"
 mkdir "$workdir"
 
 # Create a SSL key
-/usr/bin/openssl req -newkey rsa:1024 -keyout "$workdir"/key1 -nodes \
+/usr/bin/openssl req -newkey rsa:2048 -keyout "$workdir"/key1 -nodes \
     -x509 -days 2 -out "$workdir"/key3 2>/dev/null <<EOF
 .
 .