318612 - Complaints about invalid ssl cert with very large ssl certs (16384 bits in this case) Error Code: -8182

Status: RESOLVED DUPLICATE of bug 372628

(Core :: Security: PSM, defect)

Description

[Brian McPherson]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20050922 Firefox/1.0.7 (Debian package 1.0.7-1)
Build Identifier: Mozilla/5.0 (Windows U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20051201 Firefox/1.6a1

I'm running a 16384 bit RSA key on my Apache2 server, and It cannot be connected to with Firefox on any system, Firefox always gives this:

Could not establish an encrypted connection because certificate presented by fxserver.resnet.mtu.edu is invalid or corrupted. Error Code: -8182

I've tried it with openssl s_client, and it outputs:
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 16384 bit

so I know that the key is good.

It also works in Internet Explorer, so I know that it's not just because of the length.

Reproducible: Always

Steps to Reproduce:
1. Attempt to connect to https://fxserver.resnet.mtu.edu/
Actual Results:  
Could not establish an encrypted connection because certificate presented by fxserver.resnet.mtu.edu is invalid or corrupted. Error Code: -8182

Expected Results:  
Connect and display the website successfully

Note: This server will not be up after December 13th until Early January.

Arrangements can be made to obtain the key from me if necessary.

Comment 1

[Josh Birnbaum]

Attachment: certificate info

Comment 2

[Nicki]

Possibly similar to Bug 384273, although the error code is different

Comment 3

[Kaspar]

This should be resolved as a duplicate of Bug 372628, since it's due to the (deliberate) upper limit for the size of RSA keys, which is currently at 8192 bits.

Comment 4

[Kai Engert [:KaiE:]]

Thanks Kaspar.