Fix error message w/out nistp521.

Correct error message when OpenSSL doesn't support certain ECDSA key
lengths.

diff --git a/ssh-keygen.c b/ssh-keygen.c
index e9f40584798328db8e2627e11b30842b7687f40f..416d25be0278ad257f521cbf5f7e7a63db17b6af 100644 (file)
--- a/ssh-keygen.c
+++ b/ssh-keygen.c
@@ -243,7 +243,11 @@ type_bits_valid(int type, const char *name, u_int32_t *bitsp)
        case KEY_ECDSA:
                if (sshkey_ecdsa_bits_to_nid(*bitsp) == -1)
                        fatal("Invalid ECDSA key length: valid lengths are "
+#ifdef OPENSSL_HAS_NISTP521
                            "256, 384 or 521 bits");
+#else
+                           "256 or 384 bits");
+#endif
        }
 #endif
 }