From: Richard Levitte <levitte@openssl.org>
Date: Thu, 19 Jun 2003 18:55:50 +0000 (+0000)
Subject: We set the export flag for 512 *bit* keys, not 512 *byte* ones.
X-Git-Tag: BEN_FIPS_TEST_1~38^2~43
X-Git-Url: https://git.openssl.org/?p=openssl.git;a=commitdiff_plain;h=f6b9cd7f8224f8f1b7191d36a9bf1f55abeb3555;ds=sidebyside

We set the export flag for 512 *bit* keys, not 512 *byte* ones.
PR: 587
---

diff --git a/crypto/x509/x509type.c b/crypto/x509/x509type.c
index 4af98214a8..8fe1c54583 100644
--- a/crypto/x509/x509type.c
+++ b/crypto/x509/x509type.c
@@ -112,7 +112,8 @@ int X509_certificate_type(X509 *x, EVP_PKEY *pkey)
 		break;
 		}
 
-	if (EVP_PKEY_size(pk) <= 512)
+	if (EVP_PKEY_size(pk) <= 512/8)	/* /8 because it's 512 bits we look
+					   for, not bytes */
 		ret|=EVP_PKT_EXP;
 	if(pkey==NULL) EVP_PKEY_free(pk);
 	return(ret);