RE: IE can't process 1024 bits cert?
Hy, >thanks a lot. but i'm still confused of the cipher strength and >key length. i always think 40-bit should be the key length of >symmetric cipher algorithm and 512-bit is the key length of >asymmetric cipher algorithm. It's just. >40-bit data encryption aglorithm >is always corresponding to 512-bit certificate, and 128-bit >to 1024/2048-bit. is that right? No, the certificate is independent of the symetric key-length. You can have a server with a 512 bits certificate which used 128 bits symetric-key, or a server with a 2048 bits certificate which used 40 bits symetric-key. It's just a question of configuration of the server and the version (support crypto 128 bits or No). -- Ludovic FLAMENT __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: IE can't process 1024 bits cert?
> 40-bit is the cipher strength. The key length should be 512-bit. > If you want IE to handle certificates with 1024-bit keys, you will need to > download the high encryption package (click on "update information" next to > cipher strength in that About dialog box). thanks a lot. but i'm still confused of the cipher strength and key length. i always think 40-bit should be the key length of symmetric cipher algorithm and 512-bit is the key length of asymmetric cipher algorithm. 40-bit data encryption aglorithm is always corresponding to 512-bit certificate, and 128-bit to 1024/2048-bit. is that right? thanks!! __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: IE can't process 1024 bits cert?
>> I think your IE does not have 1024-bit key. Please verify this by viewing >> the Help->About dialog. > > thank you for your answer. I checked my IE version information, it only > tell me like that: > version: 5.00.2614.3500 > key length: 40-bit > > it doesn't show the key length of certificate. how can i know of that? > > appreciate for your help! 40-bit is the cipher strength. The key length should be 512-bit. If you want IE to handle certificates with 1024-bit keys, you will need to download the high encryption package (click on "update information" next to cipher strength in that About dialog box). Regards, Michael Lee __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: IE can't process 1024 bits cert?
> I think your IE does not have 1024-bit key. Please verify this by viewing > the Help->About dialog. thank you for your answer. I checked my IE version information, it only tell me like that: version: 5.00.2614.3500 key length: 40-bit it doesn't show the key length of certificate. how can i know of that? appreciate for your help! __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: IE can't process 1024 bits cert?
I think your IE does not have 1024-bit key. Please verify this by viewing the Help->About dialog. __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]