Guys, I thought I would just share this with you. I have not seen it on the 
list.

I think it is fairly well known that there are two versions of Xenroll.dll 
used by versions of IE to create certificate requests and manage CSPs etc. 
OpenCA since version 0.9.1 has managed them via the ieCSR.vbs scripts.

We have noticed that if a user has Win2K and IE6 SP1 then the version of 
xenroll.dll does not work and the users can see no CSPs to manage their certs 
with. A patch is required from Microsoft (323172) for Win2k, or it needs to 
go up to SP3. You can host a copy of the latest xenroll.dll on your web site 
under a CertControl directory and it will be downloaded and installed 
automatically .

As far as we can tell, the latest xenroll.dll is a different file, but shares 
the same identifiers as the pre-patched version. We have noticed that the 
isCSR.vbs (as of 0.9.1) is written in such a way as to not expect there to be 
a non working version of xenroll.dll, so there is a bit of a gap.

I hope this helps someone out there in OpenCA land !

Chris...


-------------------------------------------------------
This SF.NET email is sponsored by: eBay
Great deals on office technology -- on eBay now! Click here:
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to