pki: Use constant for minimal RSA key size in FIPS

Signed-off-by: Jakub Jelen <jjelen@redhat.com> Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
2026-02-05 12:50:30 +09:00 · 2025-11-06 16:24:16 +01:00
parent ae33ced0dc
commit 63fbf00efe
2 changed files with 4 additions and 3 deletions
--- a/src/pki.c
+++ b/src/pki.c
@@ -449,7 +449,7 @@ bool ssh_key_size_allowed_rsa(int min_size, ssh_key key)

    if (min_size < RSA_MIN_KEY_SIZE) {
        if (ssh_fips_mode()) {
-            min_size = 2048;
+            min_size = RSA_MIN_FIPS_KEY_SIZE;
        } else {
            min_size = RSA_MIN_KEY_SIZE;
        }