"Seier, Margitta (RAG INFORMATIK)" wrote: > > Hello team, > when I try the command, I get an error: > E:\Oracle\iSuites\Apache\open_ssl\bin>openssl req -new -key key.pem -out > csr.pem [snip] > 238:error:04075070:rsa routines:RSA_sign:digest too big for rsa > key:.\crypto\rsa > \rsa_sign.c:114: > 238:error:0D072006:asn1 encoding routines:ASN1_sign:bad get asn1 object > call:.\c > rypto\asn1\a_sign.c:129: > > What I have to do? >
Have you edited the default key size in openssl.cnf? The normal reason for this error is that the RSA key size has been set to small: some people confuse the RSA key size with symmetric key size and set the RSA key size to 128 bits, it should be 1024. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROTECTED] Senior crypto engineer, Gemplus: http://www.gemplus.com/ Core developer of the OpenSSL project: http://www.openssl.org/ Business Email: [EMAIL PROTECTED] PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
