Thank you for the confirmation re SSL v2 versus v3.

My software was giving me this error:

Fatal SSL certificate error: cannot load RSA Key

when I tried to use a private key to open a cert generated by a different version of the OpenSSL libraries. Ah, maybe the issue is that the private key file format changed (not the certificate itself). Is that true?

Ann



At 10:53 PM 03/20/2007, Kyle Hamilton wrote:
Firefox 2 and IE7 don't use SSLv2 at all.  However, the certificates
should be interchangeable.

What are your tests showing?

-Kyle H

On Mar 20, 2007, at 3:01 PM, Ann Lynnworth wrote:

Hello,

I have two questions about certificate compatibility...

1. Should certs made with OpenSSL 0.9.6 be compatible with OpenSSL
0.9.7? What about with 0.9.8?

I think my tests show that 0.9.6 is not upward compatible, but that
0.9.7 and 0.9.8 are interchangable, but I am not at all sure
whether I'm testing in a clean enough way.


2. Does anyone have details on compatibility of OpenSSL certs made
for https, and how well common browsers accept them?

I think that 0.9.6 works with Firefox 1, 1.5, Microsoft IE 5, 6,

but NOT with Firefox 2 nor IE 7.

However I'm not sure whether, maybe, all I have to do is tell my
components (Indy for Delphi) to use SSL v3 instead of v2.  (Sadly
my components are limited to OpenSSL 0.9.6 at the moment, which is
why I'm trying to sort this out.)  I haven't tried that yet.  I was
hoping someone here could give me an authoritative answer.

Thanks in advance.

Ann


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to