1024 is the export key bits limit according to current regulations, not 512.

PR: 771
Submitted by: c zhang <czhang2005@hotmail.com>

diff --git a/crypto/x509/x509type.c b/crypto/x509/x509type.c
index f78c2a6b43806edc1aed901ffa7ea0db3cd8890a..c25959a74282866ee469a32a47eb6bca5b788ece 100644 (file)
--- a/crypto/x509/x509type.c
+++ b/crypto/x509/x509type.c
@@ -106,7 +106,7 @@ int X509_certificate_type(X509 *x, EVP_PKEY *pkey)
                break;
                }
 
-       if (EVP_PKEY_size(pk) <= 512/8) /* /8 because it's 512 bits we look
+       if (EVP_PKEY_size(pk) <= 1024/8)/* /8 because it's 1024 bits we look
                                           for, not bytes */
                ret|=EVP_PKT_EXP;
        if(pkey==NULL) EVP_PKEY_free(pk);