Tim, This is believed to be a limitation of all Sun's JCE/JSSE implementations up to Java version 1.5. You can try testing your application with Java 1.5-b2 to see if the problem has indeed been fixed. Alternatively consider using IBM Java 1.4 or 3rd party JCE/JSSE implementations which _may_ not exhibit the same limitation
HTH Oleg On Sat, 2004-06-12 at 05:36, Tim Wild wrote: > Hi, > > I'm using HttpClient to connect to an apache server that requires > certificates. When I use client and server certificates from my own CA > with 1024 bit keys it works perfectly. When I get a commercial > certificate with a longer key (4096 bits), I get the following error > (full message below) when I connect to apache: > > javax.net.ssl.SSLProtocolException: java.io.IOException: subject key, > Unknown key spec: Invalid RSA modulus size. > > Google produced one result, which talked about a maximum key size using > the JCE of 2048 bits using the JDK 1.4.2 default policy files. Another > site suggested getting the unrestricted policy files, so I got and > installed them, but it doesn't seem to make any difference at all. > > Does anyone have any thought or suggestions? Half formed thoughs or > ideas are welcome as it might give me a lead that I can follow myself. > > Thanks > > Tim Wild > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
