Hello all, I think that the problem is the length of key IE needs to generate by the server request. In ie_Confirm.html it is stated (xenroll.dll vb script ) that the browser must generate a 1024 bit key with exportable or user-password exportable private key. This is no working on various versions. If I use the simplest certHelper.GenKeyFlags = 3 all tests on ie 5+ were ok . Also if set to certHelper.GenKeyFlags = 0x02000003 (key only 512bit) seems to be ok.
Michael, do you think that there will be needed more choices for IE request, depending on the version? Or probably a vb function to try with various key sizes in descending order until the private/public keys can be generated? Best regards, Alex P.S until an signing applet for mozilla will be in place, probably Netscape will be the best solution for crypto. Chris Covell wrote: > Lizner, > > I have found the following additional: > > os iexplore bits passed > Win98 5.00 40 no > Win98 5.00 128 yes > > Chris... > > PS is the cz (i.e. win98 cz) a Czeck version of the OS ? > ions i've tested: > > > > os iexplore bits cipher passed > > win98 4 40 no > > win98 5.01 40 no > > win98 5.5 56 yes > > win98 cz 5.5 128 yes > > win 2000 6.0 56 yes > > win xp clean 6.0 128 yes > > win xp patched 6.0 128 no > > win xp cz clean 6.0 128 yes > > > > > > ------------------------------------------------------- > > This sf.net email is sponsored by:ThinkGeek > > Welcome to geek heaven. > > http://thinkgeek.com/sf > > _______________________________________________ > > Openca-Users mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/openca-users > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Openca-Users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/openca-users ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users