Olga Kornievskaia wrote:
...
Ok. Thanks. I was hoping that a leading zero was the answer to my real problem which is. I'm using the above "p" and a generator "g" = 2 (both are well-known group 2 DH parameters described in the RFC 2412). I initialize the DH structure with them and the then call DH_check() which returns with an error code of 8 which is "the g value is not a generator". I'm puzzled as to why the library doesn't like the well-known DH parameters.

simply because 2 is not a generator of the group (have a look at the
last paragraph of the introduction of appendix E).

Cheers,
Nils

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to