Subject: Discussion related to cado-nfs
List archive
- From: Emmanuel Thomé <Emmanuel.Thome@inria.fr>
- To: Xiangru Zhong <xiangruzh0915@gmail.com>
- Cc: cado-nfs@inria.fr
- Subject: Re: [cado-nfs] SSL problem
- Date: Wed, 22 Sep 2021 09:30:43 -0700
- Ironport-hdrordr: A9a23:/6TWO6n73KNVAF66+ZiQiehDOprpDfI53DAbv31ZSRFFG/FwWfrDoB0+726XtN9xYgBCpTnuAsK9qB/nn6KdpLNhWItKPzOHhILLFu9fBOLZqlXd8m/Fl9K1vp0OT0ERMrDNMWQ=
Hi,
Thanks for your report.
cado-nfs uses by an RSA key for the server, so that the clients can
authenticate the commands that the servers asks them to run. (even if
you don't explicitly run a client-server computation, this is how it runs
in all cases).
cado-nfs-2.3.0 used 1024-bit keys. This setting has changed to 2048-bit
keys in the master branch.
I suppose that your SSL library does not allow 1024-bit keys. (which is a
good policy, IMHO).
To fix this on 2.3.0, you could try to change the "bits=1024" line in
scripts/cadofactor/wuserver.py, around line 825, and see if things work
better.
> I've also tried the version "cado-nfs-master" from https://gitlab.inria.fr/.
> So far it works fine, but I notice that someone is still working on it. So
> I wonder whether it's fine to use this version, or it may probably go wrong.
Yes, please use cado-nfs master branch. Not only does it fix your
problem, but it's also a lot more efficient in many aspects. Sure, it's a
development branch, so it breaks every once in a while (normally not too
often, since the stuff that really breaks things goes in merge requests
first).
Best regards,
E.
On Thu, Sep 23, 2021 at 12:12:55AM +0800, Xiangru Zhong wrote:
> I tried to install cado-nfs-2.3.0 on the wsl on my computer. Currently I am
> using an Ubuntu 20.04.3. It was compiled successfully, but when I tried
> running a factorization, it didn't work and kept showing the information:
> "Critical:HTTP server: Socket error while setting up server on None:0 :
> [SSL: EE_KEY_TOO_SMALL] ee key too small (_ssl.c:4046)".
> It will be very helpful if there's any solution to this problem.
>
> P.S.
> I've also tried the version "cado-nfs-master" from https://gitlab.inria.fr/.
> So far it works fine, but I notice that someone is still working on it. So
> I wonder whether it's fine to use this version, or it may probably go wrong.
- [cado-nfs] SSL problem, Xiangru Zhong, 09/22/2021
- Re: [cado-nfs] SSL problem, Emmanuel Thomé, 09/22/2021
Archive powered by MHonArc 2.6.19+.