I use StartCom for my certs. This year they require 2048 bit or higher key on the CSR.
It seems that my current version of Zimbra, 5.0.10_GA open source edition, always generates CSR's as a 1024 bit key.
Is there a way I can change this?
Do nerwer versions support this?
Do I have to use the CLI, and if so, can you point me to the right instructions for this version?
Thank you for your time.
5.0.10_GA is hard coded to use 1024, future versions 6.0.0_RC1 and up should support greater than 1024bit keys. See Bug 36313 – Option to specify key length for SSL certificate
As a workaround, I edited the following file:
I replaced 1024 with 2048 anywhere in the file.
I then regenerated the CSR with the management utility and all was good.
Thanks to brian for info on the new version support, and to Rich Graves for info on JCE (see post below about JCE if you still have issue)