1024 is the export key bits limit according to current regulations, not 512.

PR: 771
Submitted by: c zhang <czhang2005@hotmail.com>

diff --git a/crypto/x509/x509type.c b/crypto/x509/x509type.c
index 8fe1c5458314545581a6b223e9878d5d652de918..2cd994c5b0f57e36770730c480eed6ee377897e3 100644 (file)
--- a/crypto/x509/x509type.c
+++ b/crypto/x509/x509type.c
@@ -112,7 +112,7 @@ int X509_certificate_type(X509 *x, EVP_PKEY *pkey)
                break;
                }
 
-       if (EVP_PKEY_size(pk) <= 512/8) /* /8 because it's 512 bits we look
+       if (EVP_PKEY_size(pk) <= 1024/8)/* /8 because it's 1024 bits we look
                                           for, not bytes */
                ret|=EVP_PKT_EXP;
        if(pkey==NULL) EVP_PKEY_free(pk);