All, In line 109 of x509/x509type.c in the 4 Sep snapshot (and previous releases) we have if (EVP_PKEY_size(pk) <= 512) My analysis is that this is looking for keys smaller than 4096 bits. I think this number should be 64 although, for my purposes, it is actually good that most keys are marked export here. Does EVP_PKT_EXP provide value-for-money? Thanks, Ron. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]