SBR DH-key generation.

Jan 11, 2007 0 Replies

Hi , Is there any way to restrict steel-belted radius server's keys generation ( DH agreement ) to multiple of 64, and only within the range from 512 to 1024. I am having a test client that uses JCE that restricts the key size and its range, hence getting a exception:



java.security.InvalidAlgorithmParameterException: Prime size must be multiple of 64, and can only range from 512 to 1024 (inclusive)



I have security policy files in /lib/security , but keep getting this exception. Trace indicates a 2048 bit DH key which obviously JCE on test client blows up on.



Thank Sachin.



Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required