We set the export flag for 512 *bit* keys, not 512 *byte* ones.

PR: 587

diff --git a/crypto/x509/x509type.c b/crypto/x509/x509type.c
index 11e7b516935e32b384c2a7e50dcf7fa8a5b8da37..f78c2a6b43806edc1aed901ffa7ea0db3cd8890a 100644 (file)
--- a/crypto/x509/x509type.c
+++ b/crypto/x509/x509type.c
@@ -106,7 +106,8 @@ int X509_certificate_type(X509 *x, EVP_PKEY *pkey)
                break;
                }
 
-       if (EVP_PKEY_size(pk) <= 512)
+       if (EVP_PKEY_size(pk) <= 512/8) /* /8 because it's 512 bits we look
+                                          for, not bytes */
                ret|=EVP_PKT_EXP;
        if(pkey==NULL) EVP_PKEY_free(pk);
        return(ret);