When Requesting a Certificate Via the Oracle iPlanet Web Server 6.x Console, the Certificate Request is Coming Out as 1023 Bit and Not 1024 Bit.
Last updated on NOVEMBER 05, 2016
Applies to:Oracle iPlanet Web Server - Version 6.0 to 6.1 [Release 6.0 to 6.1]
Information in this document applies to any platform.
When requesting a certificate via the Oracle iPlanet Web Server console, the certificate request has a 1023-bit key length rather than a 1024-bit key length
Steps to reproduce:
1. Login to console
2. Select server instance
3. Select security
4. Select Request a Certificate
5. Fill out applicable information
6. Select ok
The certificate information comes back with no error; however, the CSR generated is 1023 bit.
The key size of the CSR can be verified using OpenSSL.
For example, a problematic CSR would look like:
# /usr/sfw/bin/openssl req -in /tmp/CSR_SSL.txt -text -noout
Version: 0 (0x0)
Subject: C=US, ST=California, L=Test, O=Test, OU=Test, CN=test.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1023 bit)
Modulus (1023 bit):
This problem occurs with Web Server 6.x when using old versions of the Sun Crypto Accelerator Cards (also known as, "SCA"), like SCA 500 and SCA 1000 on Solaris 8/9 Sparc.
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms