4 ms·

So what's the actual limit it is set to by default? If I get a certificate, I'm not exactly going to tell everyone to run a sudo command before opening the site

• mkhalil 13y ago
  Just looked, couldn't even find the file. /Library/Preferences/com.apple.security OSX 10.9
  • Zr40 13y ago
    com.apple.security isn't a file, it's a preferences domain. Preference domains are stored in ~/Library/Preferences/<domain>.plist for per-user domains, and /Library/Preferences/<domain>.plist for system domains. In this case, it's stored in /Library/Preferences/com.apple.security.plist. If a preferences domain doesn't exist (or if the key doesn't exist within the domain), the app or system default is used.
• deleted 13y ago
  [deleted]
• andrewcooke 13y ago
  4096 according to the code linked to in the article - http://opensource.apple.com/source/Security/Security-55471/libsecurity_apple_csp/lib/RSA_DSA_keys.h http://opensource.apple.com/source/Security/Security-55471/l...
  • apaprocki 13y ago
    I noticed the Certificate Assistant UI in Keychain Access only lets you choose as high as 2048 bits if you're generating certs that way.