Yes. The two different implementations are described at www.microsoft.com
(search for SGC).
I thought that MS SGC implementation should be simpler than Netscape. All
the renegotiations should be handled by SSL_accept. But, I don't have a MS
SGC. So, I cannot test it. Neither can I confirm it. Has anyone use MS SGC
with openssl-0.9.4?
Cheers.
--Yunhong
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Christian Buysschaert
Sent: Wednesday, December 08, 1999 1:27 PM
To: [EMAIL PROTECTED]
Subject: Re: OpenSSL & Server Gated Cryptography
> Does OpenSSL support Server Gated Cryptography (SGC)?
As far as Netscape's browser implementation of SGC (Step up encryption),
things seem to work. I am currently testing Microsoft Internet Explorer
where I haven't been able to get it working.
Microsoft uses something they call themselves "Fast SGC". Basically
it doesn't wait for the complete SSL negociation for a renegociation,
after the client hello and the server hello (incl. sending the SGC cert)
it immediately resets and resends a client hello.
Can somebody confirm this? Maybe I am wrong here... ;-)
Kind regards,
Christian.
__________________________________
VP of Technology http://www.globalsign.net
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
