Specifically, its a bug in the IE5.0.1 that comes with 56bit security - as it happens this was the most commonly shipped version with W98rel2.
IE fails to properly negotiate the 'lowest common denominator'. There is a patch for it on MS's website - but the patch doesn't always work either (or at least an early version of the patch... they may have patched the patch since I last looked). Where it is important (as it was in my previous co) to have 128, there isn't any real work-around, so you just have to signpost it as a problem release. ----- Original Message ----- From: "Lauer, Oliver" <[EMAIL PROTECTED]> To: "'Tomcat Users List'" <[EMAIL PROTECTED]> Sent: Monday, December 17, 2001 1:48 PM Subject: AW: TC with SSL, IE5.0 and 128 bit > Hi Barry, > > it's JUST an IE.50 problem but as you and I know a lot of people are using > IE.50 and we want to reach as many people as possible although I would > prefer to force those people to update to IE55 or 60. > > Nevertheless I found out a workaround. I've reduced the symetric encryption > of TC4.0 to 40 bit due to we don't need that much secruity. > With 40 bit it works with IE50 and as a side effect it's a lot faster, too. > > Oliver > > > Have you tested your app with Netscape, Opera, or Mozilla? It may just > be IE5.0's problem. Microsoft even recommends upgrading to IE5.5 or > 6.0, especially due to the new security holes that were just recently > uncovered in IE. > Barry > > > AXA eSolutions GmbH > > AXA Konzern AG Germany > > Oliver Lauer > > Web Architect > > W�rthstra�e 34 > > D-50668 K�ln > > Germany > > Tel.: +49 221 148 31277 > > Fax: +49 221 148 43963 > > Mobil: +49 179 59 064 59 > > e-Mail: [EMAIL PROTECTED] > > _____________________________ > > > > > -----Urspr�ngliche Nachricht----- > Von: Barry L. White [mailto:[EMAIL PROTECTED]] > Gesendet: Samstag, 15. Dezember 2001 07:14 > An: Tomcat Users List > Betreff: Re: TC with SSL, IE5.0 and 128 bit > > > Lauer, Oliver wrote: > > >Hi all, > > > >we've built an insurance calculator and and a online contracting machine > >based on Tomcat4.0 with SSL. Doing integration testing I've noticed that TC > >with ssl doesn't work with IE5.0 (128 bit). > >It works with with 5.5 and higher. > >I've heard that this is a known bug in IE5.0 and I should upgrade to 5.5 or > >higher. Now I'm running into difficulties due to I can't request the > >internet users to upgrade or to download IE5.5 or higher for using our > >calculator. Does somebody know how to solve my problem ? Can I change for > >example the encryption in TC to 40 bit ? > > > >Any help appreciated ! > >Oliver > > > > > >>AXA eSolutions GmbH > >>AXA Konzern AG Germany > >>Oliver Lauer > >>Web Architect > >>W�rthstra�e 34 > >>D-50668 K�ln > >>Germany > >>Tel.: +49 221 148 31277 > >>Fax: +49 221 148 43963 > >>Mobil: +49 179 59 064 59 > >>e-Mail: [EMAIL PROTECTED] > >>_____________________________ > >> > >> > > > >-- > >To unsubscribe: <mailto:[EMAIL PROTECTED]> > >For additional commands: <mailto:[EMAIL PROTECTED]> > >Troubles with the list: <mailto:[EMAIL PROTECTED]> > > > > > > > Have you tested your app with Netscape, Opera, or Mozilla? It may just > be IE5.0's problem. Microsoft even recommends upgrading to IE5.5 or > 6.0, especially due to the new security holes that were just recently > uncovered in IE. > Barry > -- To unsubscribe: <mailto:[EMAIL PROTECTED]> For additional commands: <mailto:[EMAIL PROTECTED]> Troubles with the list: <mailto:[EMAIL PROTECTED]>
