Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a scenario in which we'd like to configure a WebLogic 8.1 server (running on Windows, JRockit 1.4.2) to connect to Active Directory over SSL for authentication. Our Active Directory is configured for SSL with a Root CA and Subordinate CA that have 4096-bit keys. We found this was unsupported in that version of the JRE, so we tried configuring BouncyCastle as the security provider, as it supports that keylength. We've been able to configure an SSL certificate from the same CA hierarchy, and it's able to load that (we can connect via SSL with no problem). However, when we enable SSL for Active Directory, we get an error.

Has anyone else tried running WebLogic with this configuration, or using BouncyCastle to support large keysizes, in general?

share|improve this question
One has to ask, 4096? Even combining all the known computing power in the world it would be the Heat-death of the universe before you got through 0.0001 of the available prime-number factorizations. – Zephyr Pellerin Sep 16 '10 at 18:45
For a CA with validity of 20 years, in a high-security industry? Yes. 4096. – Shadowman Sep 17 '10 at 14:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.