keys: Fix defaults and documentation.

[tripe] / keys / tripe-keys.conf.5.in

diff --git a/keys/tripe-keys.conf.5.in b/keys/tripe-keys.conf.5.in
index c6e0f2579a94f5c5cef959c4dd5926be85896d75..ad3173d3df4ac6dfc4019ffe30bdf512ffeeba02 100644 (file)
--- a/keys/tripe-keys.conf.5.in
+++ b/keys/tripe-keys.conf.5.in
@@ -155,14 +155,14 @@ center;
 _
 kx     kx-param
 _
-dh     \-LS \-b2048 \-B256
+dh     \-LS \-b3072 \-B256
 ec     \-Cnist-p256
 _
 .TE
 .TP
 .I kx-expire
 Expiry time for generated keys.  Default is
-.BR "now + 1 day" .
+.BR "now + 1 year" .
 .TP
 .I hash
 Hashing algorithm to use.  Default is
@@ -233,9 +233,9 @@ center;
 _
 sig-genalg     sig-param
 _
-dh     \-LS \-b2048 \-B256
-dsa    \-b2048 \-B256
-rsa    \-b2048
+dh     \-LS \-b3072 \-B256
+dsa    \-b3072 \-B256
+rsa    \-b3072
 ec     \-Cnist-p256
 _
 .TE
@@ -271,7 +271,7 @@ and
 .IB repos-base .
 .TP
 .I sig-file
-Tempalte for repository signatures.  Default is the concatenation of
+Template for repository signatures.  Default is the concatenation of
 .I base-dir
 and
 .IR sig-base .