Re: PKINIT for gsissh

4 okt 2011 kl. 15:41 skrev Ali Gholami:

>> Hi Love,
>> 
>>> Well, when I debug it, I see "indata.length = 83" and "sig->data" which I think is the "rsa" size equal to 64.  My question was the purpose of this if clause: "if (indata.data != data->data)".  
>> 
>> you have 512byte rsa keys, todays larger digests (sha512) doesn't fit inside the rsa encryption.
>> 
>> While the code should not choose that large checksums for smaller keys, you should not choise 512bit rsa keys since they are insecure.
>> 
>> If you stop using 512bit rsa keys, it should work just fine.
>> 
> How and where should I specify these values?

In the tool that created the privatekey/certificate, I assume that is your 'x509 certificate proxy' that you mentioned in the first mail.

Love