Goal

Customer's security team requires the key size to be greater than the hard coded 2048; policy dictates that root Certificate Authorities must generate 4096 root certificates.

Problem: https://bugzilla.redhat.com/show_bug.cgi?id=1547497

Additional Information

• Feature discussion and findings doc: https://docs.google.com/document/d/1_NubZwTUkqTzWTiBE-ecucIhhAlvuyYB8lUurT4esmM/edit?usp=sharing
• TLS Registry summary doc: https://docs.google.com/document/d/1Iof4UKZAp5xzAsIAsPZsKaDFjaBcoVqkx2P1CC53rG4/edit?usp=sharing
• Current TLS Registry snapshot captured in an excel sheet: https://docs.google.com/spreadsheets/d/1kcmupVStn2BbqG9aNxo3oJO4qYLFSi6YsqpYXxTh5WY/edit?usp=sharing