It works! Thanks. 

-----Original Message-----
From: Wade L. Scholine [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 17, 2000 12:46 PM
To: '[EMAIL PROTECTED]'
Cc: '[EMAIL PROTECTED]'
Subject: RE: International Client connecting to Domestic Server



You probably need to set up to create a temporary 512-bit RSA key. Look in
apps/s_server.c and grep for SSL_CTX_set_tmp_rsa_cb.

> -----Original Message-----
> From: Kenneth Brock [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, March 16, 2000 4:13 PM
> To: [EMAIL PROTECTED]
> Subject: International Client connecting to Domestic Server
> 
> 
> I have a Netscape client configured for Export strength encryption
> conencting to an
> Openssl server configured for Domestic encryption.  The Openssl
> certificate has
> a 1024 bit key pair.
> 
> The Netscape client drops the  connection with an error
> SSL_ERROR_PUB_KEY_SIZE_LIMIT_EXCEEDED.
> 
> The server generates a server key exchange message, but the Netscape
> client rejects
> it.  Does server's certificate need some specific extension to support
> an export client
> connecting to it.
> 
> -Dave Ahrens
> 
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
> 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to