From 71c7d30e0062bff7adc93878a44513b185b7a40e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Toke=20H=C3=B8iland-J=C3=B8rgensen?= <toke@redhat.com>
Date: Tue, 8 Jan 2019 13:07:06 +0100
Subject: [PATCH] acme: Remove 8192 bits certificate option
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This is not supported by letsencrypt, so issuing the certificate will fail.
Instead, add 3072 bits as an intermediate option.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
---
 net/acme/Makefile           | 2 +-
 net/acme/files/acme-cbi.lua | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/net/acme/Makefile b/net/acme/Makefile
index 112e56669..3feb74478 100644
--- a/net/acme/Makefile
+++ b/net/acme/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=acme
 PKG_VERSION:=2.7.9
-PKG_RELEASE:=5
+PKG_RELEASE:=6
 PKG_LICENSE:=GPLv3
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
diff --git a/net/acme/files/acme-cbi.lua b/net/acme/files/acme-cbi.lua
index 3b02f48ab..cb469b9d6 100644
--- a/net/acme/files/acme-cbi.lua
+++ b/net/acme/files/acme-cbi.lua
@@ -56,8 +56,8 @@ us.rmempty = false
 kl = cs:option(ListValue, "keylength", translate("Key size"),
                translate("Key size (and type) for the generated certificate."))
 kl:value("2048", "RSA 2048 bits")
+kl:value("3072", "RSA 3072 bits")
 kl:value("4096", "RSA 4096 bits")
-kl:value("8192", "RSA 8192 bits")
 kl:value("ec-256", "ECC 256 bits")
 kl:value("ec-384", "ECC 384 bits")
 kl.default = "2048"