We set the export flag for 512 *bit* keys, not 512 *byte* ones.

PR: 587

diff --git a/crypto/x509/x509type.c b/crypto/x509/x509type.c
index 4af98214a8ec57e16074e715986d87565395708e..8fe1c5458314545581a6b223e9878d5d652de918 100644 (file)
--- a/crypto/x509/x509type.c
+++ b/crypto/x509/x509type.c
@@ -112,7 +112,8 @@ int X509_certificate_type(X509 *x, EVP_PKEY *pkey)
                break;
                }
 
-       if (EVP_PKEY_size(pk) <= 512)
+       if (EVP_PKEY_size(pk) <= 512/8) /* /8 because it's 512 bits we look
+                                          for, not bytes */
                ret|=EVP_PKT_EXP;
        if(pkey==NULL) EVP_PKEY_free(pk);
        return(ret);