Make newer OpenSSL accept 1024-bit MIT CA key (#1204)
Make newer OpenSSL accept 1024-bit MIT CA key (#1204)

For verifying client certificates, allow verification to proceed with
MIT's 1024-bit CA key. Debian 10 uses a newer version of Openssl than
Debian 9, and requires a 2048-bit CA key, by default, when it verifies
client certificates. Applications like Kibana, in its Nginx
configuration, verify client certificates, which is delegated to
OpenSSL.
mitodl/salt-ops,mitodl/salt-ops