Microsoft KB Archive/274114

{|
 * width="100%"|

PRB: Windows Enforces SSL Key Size Limits

 * }

Q274114

-

The information in this article applies to:


 * Microsoft Platform Software Development Kit (SDK)

-

SYMPTOMS
Secure socket layer (SSL) private/public key pair sizes cannot exceed the key size limit that is listed in the following table. If the size limit is exceeded, the server will terminate the connection during the SSL negotiation phase.

SSPI/SSL Considerations
If the SSL key size is exceeded, Security Support Provider Interface (SSPI)/SSL server applications receive a &quot;SEC_E_INTERNAL_ERROR&quot; when calling InitializeSecurityContext.

Socket-based SSPI/SSL clients that instigate this error often see a return code of &quot;WSAECONNRESET&quot; on a call to recv during SSL authentication.

Additional query words:

Keywords : kbAPI kbKernBase kbSDKWin32 kbSecurity kbSSPI kbDSupport kbGrpDSKernBase

Issue type : kbprb

Technology : kbWin32SDKSearch kbAudDeveloper kbSDKSearch