[EMAIL PROTECTED] wrote:
>
> what I found out (maybe others are interested, too):
>
> It seems that Netscape 3.x cannot handle CA-Certificates with more than
> 1024 bits. Can anyone ACK this? And... is there a patch (no, not upgrade :-)?
Yes, I experienced the same problems. No, I found no patch, even
fortifying did no trick (http://www.fortify.net), seems like high
numbers are a general problem for navigator.
I recommend you to drop support for generation-3.x-browsers. It is a
pain to suite your environment to enable the use of this browsers...
if you get them to work with your own (weak) CA and all your server
certs, you will get into bad trouble when you start distributing
client certs. Better spend this time to make things work with MSIE ;-)
Eckard
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]