kbg wrote: > > Dear all, > > I've asked that question few days ago and didn't get an answer... I can > understand that my question is more linked to the ssleay layer and not > really to the mod-ssl but if It is impossible to create a 40 bits csr, > and if someone knows it, I'll really be glad to have that answer (I'm > really not an expert of encryption). > Well, neither am I. Since [EMAIL PROTECTED] is a mailing list much more dedicated to usage of the underlying layers, I would suggest you subscribe and listen there. See www.openssl.org for more info. Still, the need to work around serveral local restrictions on key usage and export regulations were part of the reason that ssleay, now moving into openssl, was created in the first place. Therefore, programmers are much more interested in providing you with access to the full encryption stuff than to build backdoors or weaknesses that specific governments may require. I think you'll need to build custom clients as well to actually use any 40-bits encrypted https. Do these exist at all? -- Niels Poppe - org.net bv <[EMAIL PROTECTED]> ______________________________________________________________________ Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/ Official Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]