From: "MartinBosslet (Martin Bosslet)" Date: 2012-09-02T20:51:08+09:00 Subject: [ruby-core:47393] [ruby-trunk - Bug #6938] [PATCH] Increase DH key size to fix test suite in FIPS mode Issue #6938 has been updated by MartinBosslet (Martin Bosslet). > Why TEST_KEY_DH1024 in test/openssl/utils.rb doesn't use cache? Unfortunately DH doesn't allow serialization of the private exponent out of the box like the other PKeys do. But 1024 bits generation is eating up a lot of time, way too much for tests IMO. And what's worse, I saw that the "test-all" target for one run on rubyci timed out. I'm currently looking for a way to still be able to serialize DH keys including the private exponent to solve this. ---------------------------------------- Bug #6938: [PATCH] Increase DH key size to fix test suite in FIPS mode https://bugs.ruby-lang.org/issues/6938#change-29138 Author: vo.x (Vit Ondruch) Status: Closed Priority: Normal Assignee: MartinBosslet (Martin Bosslet) Category: Target version: ruby -v: ruby 2.0.0dev In FIPS mode, DH refuses to generate or use keys with modulus smaller than 1024 bits. This patch increases the key size to make the test suite pass. -- http://bugs.ruby-lang.org/