Hi ,
Is there any way to restrict steel-belted radius server's keys
generation ( DH agreement ) to multiple of 64, and only within the
range from 512 to 1024.
I am having a test client that uses JCE that restricts the key size and
its range, hence getting a exception:
java.security.InvalidAlgorithmParameterException: Prime size must be
multiple of 64, and can only range from 512 to 1024 (inclusive)
I have security policy files in <java-home>/lib/security , but keep
getting this exception. Trace indicates a 2048 bit DH key which
obviously JCE on test client blows up on.
Thank
Sachin.
|