Yes, sorry to bother you all, but it seems to be working now. I found that
same site myself a few minutes ago, and it told me Netscape 4.73 connected
to it using RC4. Then I tried to connect to my own webserver, and it
connected to it using 3DES.

Must have changed something in the server settings since I last tried it
with Netscape...

Filip

--
Filip van Laenen
[EMAIL PROTECTED] ([EMAIL PROTECTED])
Senior Knowledge Engineer, Computas, http://www.computas.com
Telefon: +47 67 83 10 00 Fax: +47 67 83 10 01


-----Original Message-----
From: Airey, John [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 12, 2000 12:27 PM
To: '[EMAIL PROTECTED]'
Subject: RE: msie AGAIN


Try visiting http://www.fortify.net/sslcheck.html and see what it says. This
page will negotiate the highest security and state it. For example, using
IE5.01 SP1 I get RC4 128bit.

At first glance it appears you are not afflicted with export restricted
ciphers, so it should be OK.

- 
John Airey
Internet Systems Support Officer, ITCSD, Royal National Institute for the
Blind,
Bakewell Road, Peterborough PE2 6XU,
Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED] 


-----Original Message-----
From: Filip Van Laenen [mailto:[EMAIL PROTECTED]]
Sent: 12 July 2000 11:21
To: '[EMAIL PROTECTED]'
Subject: RE: msie AGAIN


I have version 4.73 installed, and it says this in the 'About':

--
This version supports U.S. security with RSA
                  Public Key Cryptography, MD2, MD5, RC2-CBC,
                  RC4, DES-CBC, DES-EDE3-CBC . 
--

I find that sentence a bit cryptic (sorry, but I'm not a native speaker):
does it mean that it supports those ciphers only in the US? I'm sitting in
Norway, and the version I'm running here cannot connect to an SSL-webserver
if I don't open the server for ciphers with 40 bit key lengths (or less).

Filip

--
Filip van Laenen
[EMAIL PROTECTED] ([EMAIL PROTECTED])
Senior Knowledge Engineer, Computas, http://www.computas.com
Telefon: +47 67 83 10 00 Fax: +47 67 83 10 01


-----Original Message-----
From: Airey, John [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 12, 2000 11:48 AM
To: '[EMAIL PROTECTED]'
Subject: RE: msie AGAIN


You will find that all versions of Netscape since 4.72 support 128bit
encryption out of the box.

- 
John Airey
Internet Systems Support Officer, ITCSD, Royal National Institute for the
Blind,
Bakewell Road, Peterborough PE2 6XU,
Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED] 


-----Original Message-----
From: Filip Van Laenen [mailto:[EMAIL PROTECTED]]
Sent: 12 July 2000 08:51
To: '[EMAIL PROTECTED]'
Subject: RE: msie AGAIN


Hi,
 
While on the subject, is there an export version of Netscape with 128 bit
encryption? I had a problem similar to yours, but later found out that it
was because MSIE doesn't support IDEA, while I was telling the server that
it should only accept that algorithm. The thing that made me angry is that
the browser just hangs or gives you a stupid message telling it cannot
connect, in stead of just telling the truth, namely that it couldn't produce
the correct cipher for the server. They must be explicitly hiding that
message in MSIE...
 
Best regards,
 
Filip

-- 
Filip van Laenen 
[EMAIL PROTECTED] ([EMAIL PROTECTED]) 
Senior Knowledge Engineer, Computas, http://www.computas.com
<http://www.computas.com/>  
Telefon: +47 67 83 10 00 Fax: +47 67 83 10 01 

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 12, 2000 4:57 AM
To: [EMAIL PROTECTED]
Subject: msie AGAIN


ok, microsoft really Pis___ me off!  Why can't they do anything right?
Enough of that, I'm just venting a little.  Anyway, I've spent the last two
days trouble shooting this msie5x problem with https.  I've read and reread
the manual and the FAQ.  As well as searched for hours on the mailing lists.
I have found many things to try, like CipherSuite entries and SSLProtocol.
But I have still been unable to resolve the problem.  As you can see from
my configurartion file I have tried many many things.  The server that is
giving me problems was the first apache server I did (I used the rpms from
RedHat 6.2 apachessl server and loaded all the add on rpms that came with
it).  Please don't tell me to reinstall not using the rpms it is not an
option on this server and yes I have stopped using those freaking rpms.
Anyway,  could anyone please tell me what I got to do in my httpd.conf file
to get msie to view my https server pages.  Oh, I have tried to view the
https pages with ie5.0, 5.01, 5.5  both 40 and 128 bit encryption and none
of them work.  I can view the non-https pages just fine all versions of msie
and Netscape well view everything including the https pages just fine (Ahh,
long live Netscape.)
Thanks ahead of time for you thoughts on this problem of mine.
Jeff Gelina
 
P.S. Sorry for pasting the whole darn thing here, but wanted to make sure
you had it all to look at.
  

 

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]


Royal National Institute for the Blind 
Registered charity number 226227.


______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]


Royal National Institute for the Blind 
Registered charity number 226227.


______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to