On Thu, Jan 05, 2012, Dave Thompson wrote: > > From: [email protected] On Behalf Of Dr. Stephen Henson > > Sent: Thursday, 05 January, 2012 11:34 > > > On Wed, Jan 04, 2012, [email protected] wrote: > <snip: stunnel using 0.9.8r-fips:> > > error:05067068:Diffie-Hellman routines:GENERATE_KEY:key size too small > > > The above problem is cause by FIPS mode refusing to generate > > a DH key smaller > > than 1024 bits. This is caused by the parameters on the > > server which would > > need to be updated to be at least 1024 bits: this is > > advisable anyway for > > security reasons. > > > Aside: where is this checked? I don't see it in fips-1.1.2 > fips-1.0/dh/fips_dh_key.c but I don't use FIPS builds. >
It is in the generate_key function in OpenSSL 0.9.8, fips/dh/fips_dh_key.c > > > A temporary alternative is to disable the use of EDH > > ciphersuites in the > > client and only use the static RSA ones. That does however > > mean you lose > > forward secrecy. > > > I assume it also works technically to turn off FIPS mode. > But if you're going to the extra trouble of running FIPS > I assume it's usually because you must. > Yes the restriction is only in FIPS mode. > JSSE does support ephECDH (and apparently staticECDH too FWIW) > *IF* the underlying algorithm providers support EC primitives. > In Java6 the default Sun^WOracle providers don't, you have to > add e.g. www.bouncycastle.org . Java7 does. But OpenSSL 0.9.8 > has EC suites default-disabled, and I don't know where to check > their 140 status (though I know ECDSA is in 186-2, and since > ECDH is the same math logically it should be equally okay; > but as we've been told 140 isn't entirely logical). > The 1.2 validation does not include any ECC algorithms. The up coming 2.0 validation does. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
