On Mon, Mar 29, 2004, linux guy wrote:

> IE can not visit our HTTPS webserver while I create a self-signed certificate with a 
> RSA key
> which size is less than 365 bits,but they works well when the RSA size is more than 
> or eaqual to 
> 365.....

I'm surprised it can handled 365 bits. For SSLv3 and TLS as I mentioned
recently the key size has to be large enough to send a 48 byte premaster
secret. Add the 11 bytes of padding and you get 472 bits as a minimum.

Are you using SSLv2 by any chance?

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to