Hello Sergio,
> From: Sergio Rabellino <[EMAIL PROTECTED]>
> ...
> Anyone knows how to import a 1024 bit cert into IIS ?(I prefer
> Apache/Unix, but my principal want IIS/NT support also... :-(( )
I don't know how to import 1024 bit certs into IIS, but you can
generate a CSR (1024 bit RSA) using NON domestic IIS4.
If you are using SP3 you need a special schannel.dll,
Do you need it? I can send it to you.
If you are using SP4 you don't need any special stuff.
The basic steps are:
-------------------------
Run RegEdit.exe
Open (click on the + next to) HKEY_LOCAL_MACHINE, the go to the
following subkey:
System\CurrentControlSet\Control\SecurityProviders
Select SCHANNEL.
On the Edit menu, select New, then choose DWord Value. A new value appears
in the right-hand pane.
If necessary, right click on the new item and choose Rename from the context
menu.
Type EnableSGC and press ENTER.
Right click on EnableSGC and choose Modify. The Edit DWord Value dialog
appears.
Type 1 (one) and click OK.
Click Registry, then Exit to end the Registry Editor.
This change will take effect when you next start Windows NT.
Now you can generate CSRs of 512, 768, 1024 bits len,
a 1024 bits key doesn't mean domestic encryption (you know it).
>
> Ps. Where you found this trick about the usage of the physical stores ?
>
It was found at http://support.microsoft.com/support but I don't remember
the exactly URL, sorry...
Ciao,
Miguel
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]