All,
In line 109 of x509/x509type.c in the 4 Sep snapshot (and previous releases)
we have
if (EVP_PKEY_size(pk) <= 512)
My analysis is that this is looking for keys smaller than 4096 bits. I think
this number should be 64 although, for my purposes, it is actually good that
most keys are marked export here. Does EVP_PKT_EXP provide value-for-money?
Thanks,
Ron.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]