I have a Netscape client configured for Export strength encryption
conencting to an
Openssl server configured for Domestic encryption.  The Openssl
certificate has
a 1024 bit key pair.

The Netscape client drops the  connection with an error
SSL_ERROR_PUB_KEY_SIZE_LIMIT_EXCEEDED.

The server generates a server key exchange message, but the Netscape
client rejects
it.  Does server's certificate need some specific extension to support
an export client
connecting to it.

-Dave Ahrens

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to