----- Original Message -----
From: "Sibone Chen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, January 29, 2000 9:37 AM
Subject: Re: Crypto law question...
> Ralf,
>
> I am in China. This law question is relate to me. My problem is: If I need
128
> bit SSL cryption, what should I do? Do I need to reinstall the mod-ssl? Do
I
> need to reapply a cert for 128 bit SSL on my www site from Versign? If
yes,
> can Versign give me that cert?
>
> Regards
> Sibone
>
> ---------------------------------------------------------------
> "Ralf S. Engelschall" wrote:
>
> >
> > I though you're in Germany, Daniel? If yes, then why do you bother about
> > US export laws? For the Win32 problems I can only say that I've not
> > changed any Win32 stuff in mod_ssl recently, so I guess the problems
> > might be more related to changes in Apache. But if you have any patches
> > at hand, let us know about them, please.
> >
> > Ralf S. Engelschall
> > [EMAIL PROTECTED]
> > www.engelschall.com
> > ______________________________________________________________________
> > Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> > User Support Mailing List [EMAIL PROTECTED]
> > Automated List Manager [EMAIL PROTECTED]
>
>
You need to use regular cipher-suits instead of export-ciphers. Operational
wise, certificates are independent of symmetrical ciphers.
However, 1024 public key should be used to match 128 symmetrical ciphers.
cheers
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
