ECC curve list order (#132)

* Deprecate secp192r1.

* Specify explicit list of OK curves.

* Order curves.
This commit is contained in:
Felix Fontein
2020-10-29 08:19:13 +01:00
committed by GitHub
parent fc4b5225d2
commit 92bc17463a
3 changed files with 33 additions and 29 deletions

View File

@@ -0,0 +1,2 @@
minor_changes:
- "openssl_privatekey - the elliptic curve ``secp192r1`` now triggers a security warning. Elliptic curves of at least 224 bits should be used for new keys; see `here <https://cryptography.io/en/latest/hazmat/primitives/asymmetric/ec.html#elliptic-curves>`_ (https://github.com/ansible-collections/community.crypto/pull/132)."