Hello all,
I think that the problem is the length of key IE needs to generate by the server
request. In ie_Confirm.html it is stated (xenroll.dll vb script ) that the browser
must generate a 1024 bit key with exportable or user-password exportable private
key. This is no working on various versions. If I use the simplest
 certHelper.GenKeyFlags = 3 all tests on ie 5+ were ok . Also if set to
 certHelper.GenKeyFlags = 0x02000003 (key only 512bit) seems to be ok.

Michael, do you think that there will be needed more choices for IE request,
depending on the version? Or probably a vb function to try with various key sizes
in descending order until the private/public keys can be generated?

Best regards,
Alex

P.S until an signing applet for mozilla will be in place, probably Netscape will
be the best solution for crypto.

Chris Covell wrote:

> Lizner,
>
> I have found the following additional:
>
> os              iexplore                bits            passed
> Win98   5.00            40              no
> Win98   5.00            128             yes
>
> Chris...
>
> PS is the cz (i.e. win98 cz) a Czeck version of the OS ?
> ions i've tested:
> >
> > os                    iexplore                bits cipher             passed
> > win98                 4               40                      no
> > win98                 5.01            40                      no
> > win98                 5.5             56                      yes
> > win98 cz              5.5             128                     yes
> > win 2000              6.0             56                      yes
> > win xp clean          6.0             128                     yes
> > win xp patched                6.0             128                     no
> > win xp cz clean               6.0             128                     yes
> >
> >
> > -------------------------------------------------------
> > This sf.net email is sponsored by:ThinkGeek
> > Welcome to geek heaven.
> > http://thinkgeek.com/sf
> > _______________________________________________
> > Openca-Users mailing list
> > [EMAIL PROTECTED]
> > https://lists.sourceforge.net/lists/listinfo/openca-users
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Openca-Users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/openca-users



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to