> So the error was not in OpenSSL or CAPI, but rather in the incorrect > use of the function DH_generate_key (the return value was not taken > into account properly when setting up the shared secret). A simple > fix is to add zero padding when the secret is less than 128 bytes.
My mistake, it's the function DH_compute_key(). Christophe ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]