When Requesting a Certificate Via the Oracle iPlanet Web Server 6.x Console, the Certificate Request is Coming Out as 1023 Bit and Not 1024 Bit.
(Doc ID 1313305.1)
Last updated on NOVEMBER 05, 2016
Applies to:Oracle iPlanet Web Server - Version 6.0 to 6.1 [Release 6.0 to 6.1]
Information in this document applies to any platform.
When requesting a certificate via the Oracle iPlanet Web Server console, the certificate request has a 1023-bit key length rather than a 1024-bit key length
Steps to reproduce:
1. Login to console
2. Select server instance
3. Select security
4. Select Request a Certificate
5. Fill out applicable information
6. Select ok
The certificate information comes back with no error; however, the CSR generated is 1023 bit.
The key size of the CSR can be verified using OpenSSL.
For example, a problematic CSR would look like:
# /usr/sfw/bin/openssl req -in /tmp/CSR_SSL.txt -text -noout
Version: 0 (0x0)
Subject: C=US, ST=California, L=Test, O=Test, OU=Test, CN=test.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1023 bit)
Modulus (1023 bit):
This problem occurs with Web Server 6.x when using old versions of the Sun Crypto Accelerator Cards (also known as, "SCA"), like SCA 500 and SCA 1000 on Solaris 8/9 Sparc.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document