[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: how to tell client to use ssf=256 instead of ssf=128

To: Tobias Hachmer <lists@kokelnet.de>, openldap-technical@openldap.org
Subject: Re: how to tell client to use ssf=256 instead of ssf=128
From: Quanah Gibson-Mount <quanah@zimbra.com>
Date: Mon, 08 Oct 2012 11:03:35 -0700
Content-disposition: inline
In-reply-to: <e5eea787c4bd5964b0fe49817b8036ac@hachmer.de>
References: <e5eea787c4bd5964b0fe49817b8036ac@hachmer.de>

--On Monday, October 08, 2012 7:42 PM +0200 Tobias Hachmer<lists@kokelnet.de> wrote:

Hello,

1. Why is the client connecting with ssf=128?


Because its cert key is 128 bits.

2. Can I influence the ssf used by client, if yes, how?

No.

3. Maybe a certificate issue?

Yes. If you want to force 256-bit keys, then all clients need to be issuedcerts with 256-bit keys.


<https://en.wikipedia.org/wiki/Key_size>


--Quanah


--

Quanah Gibson-Mount
Sr. Member of Technical Staff
Zimbra, Inc
A Division of VMware, Inc.
--------------------
Zimbra ::  the leader in open source messaging and collaboration

Follow-Ups:
- Re: how to tell client to use ssf=256 instead of ssf=128
  - From: Philip Guenther <guenther+ldaptech@sendmail.com>

References:
- how to tell client to use ssf=256 instead of ssf=128
  - From: Tobias Hachmer <lists@kokelnet.de>

Prev by Date: how to tell client to use ssf=256 instead of ssf=128
Next by Date: Re: how to tell client to use ssf=256 instead of ssf=128
Index(es):
- Chronological
- Thread