There is a bug with IE that restricts support to standard key lengths (ie.
512, 1024) only.

A server-side work-around:

1) Generate a new standard length CSR.

2) Create a self-signed cert and test it out.

3) If this works, request a new key from a CA.

This bug was fixed in IE 5.01.

regards,
Scott Coleman

> I've seen a similar problem -- have SuperCert from Thawte, no problems.
>
> But ... older IE (v4) that tries to work at 56bits bombs with error "in
secure
> channel" and doesn't even send a GET request let alone view the site. Have
> posted this question a day or two ago, but no response(s) so far
   very
> latest IE v5 using 40-bits works okay, and all Netscapes that I've tried.
Opera
> seemed to work but it got muddled before I got distracted to doing
something
> else so not fully tested.
>
> Also looking for any ideas out there.
>

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to