https://issues.apache.org/bugzilla/show_bug.cgi?id=56396

--- Comment #3 from Mladen Turk <mt...@apache.org> ---
OK. Think I get more clearer picture now.

There are two things we should do inside
ssl_tmp_key_init_rsa function

1. Use RSA_generate_key_ex function
2. Be tolerant on keys < 1024 bits if OPENSSL_FIPS is defined
   because they are supposed to fail as per fips-140 spec.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to