kbg wrote:
> 
> Hy,
> 
> I'm trying to generate a 40 key to be used with an ssl-apache server
> (due to country limitations).
> 
> I've tried many things to generate it...
> ssleay genrsa -rand rand.dat -des 40 > server.key
> gives me a server.key file that looks nice, but doing
> ssleay req -new -key server.key -out server.csr
> gives me errors:
> 
> 5682:error:04074070:rsa routines:RSA_sign:digest too big for rsa
> key:rsa_sign.c:105:
> 5682:error:0D072006:asn1 encoding routines:ASN1_SIGN:EVP
> lib:a_sign.c:132:
> 
> If someone could give me a hint...

RSA (as defined in PKCS#1) cannot use a key smaller than
96 bits (and that only leaves one byte payload per PKCS#1
block).  This is not really a problem as factoring a number
this small is probably not that difficult!

-- 
Bernard Leach                    Australian Business Access Pty Ltd.
[EMAIL PROTECTED]               http://www.aba.net.au/people/leachbj/
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to