| Index: webrtc/base/nssidentity.cc
|
| diff --git a/webrtc/base/nssidentity.cc b/webrtc/base/nssidentity.cc
|
| index 6511942a3443eab85f977d24c2a868d7df4f30f7..f32c6c0f2f67f5129dceb901c4aaa9d6e901d635 100644
|
| --- a/webrtc/base/nssidentity.cc
|
| +++ b/webrtc/base/nssidentity.cc
|
| @@ -52,9 +52,9 @@ NSSKeyPair* NSSKeyPair::Generate(KeyType key_type) {
|
| SECKEYPrivateKey* privkey = nullptr;
|
| SECKEYPublicKey* pubkey = nullptr;
|
| SSLKEAType ssl_kea_type;
|
| - if (key_type == KT_RSA) {
|
| + if (key_type == KT_RSA1024 || key_type == KT_RSA2048) {
|
| PK11RSAGenParams rsa_params;
|
| - rsa_params.keySizeInBits = 1024;
|
| + rsa_params.keySizeInBits = key_type == KT_RSA1024 ? 1024 : 2048;
|
| rsa_params.pe = 0x010001; // 65537 -- a common RSA public exponent.
|
|
|
| privkey = PK11_GenerateKeyPair(
|
| @@ -432,7 +432,7 @@ NSSIdentity* NSSIdentity::GenerateInternal(const SSLIdentityParams& params) {
|
| arena = certificate->arena;
|
|
|
| SECOidTag sec_oid;
|
| - if (params.key_type == KT_RSA) {
|
| + if (params.key_type == KT_RSA1024 || params.key_type == KT_RSA2048) {
|
| sec_oid = SEC_OID_PKCS1_SHA256_WITH_RSA_ENCRYPTION;
|
| } else if (params.key_type == KT_ECDSA) {
|
| sec_oid = SEC_OID_ANSIX962_ECDSA_SHA256_SIGNATURE;
|
|
|