When Requesting a Certificate Via the Oracle iPlanet Web Server 6.x Console, the Certificate Request is Coming Out as 1023 Bit and Not 1024 Bit. (Doc ID 1313305.1)

Last updated on NOVEMBER 05, 2016

Applies to:

Oracle iPlanet Web Server - Version 6.0 to 6.1 [Release 6.0 to 6.1]
Information in this document applies to any platform.

Symptoms

When requesting a certificate via the Oracle iPlanet Web Server console,  the certificate request has a 1023-bit key length rather than a 1024-bit key length

Steps to reproduce:
1. Login to console
2. Select server instance
3. Select security
4. Select Request a Certificate
5. Fill out applicable information
6. Select ok

The certificate information comes back with no error; however, the CSR generated is 1023 bit.

The key size of the CSR can be verified using OpenSSL.
For example, a problematic CSR would look like:

# /usr/sfw/bin/openssl req -in /tmp/CSR_SSL.txt -text -noout
Certificate Request:
Data:
Version: 0 (0x0)
Subject: C=US, ST=California, L=Test, O=Test, OU=Test, CN=test.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1023 bit)
Modulus (1023 bit):
69:d8:0b:c7:6c:a7:52:44:c5:5f:5a:1e:b3:4d:8f:


This problem occurs with Web Server 6.x when using old versions of the Sun Crypto Accelerator Cards (also known as, "SCA"), like SCA 500 and SCA 1000 on Solaris 8/9 Sparc.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms