Hi Mikey !
You have rigth!, I forget the step about tag my
certificate make myself for NN and IE.
When I pathed NN with fortify it worked!, about IE
(my version is for spanish people), only I downloaded
the patch from Microsoft and worked!!
Hurra...AL FIN!!! :-D
The web page about the patch for 128 bits you can
find in microsoft, depends of your
language-configuration and version of IE, that's:
http://www.microsoft.com/windows/ie/downloads/recommended/128bit/default.asp
I don't know why microsoft offer this patch, when
early time only US citizen in USA, could to use 128
bits.
Well, thanks for your suggestion.
All of the days I learn new things..
-Pablo
--- [EMAIL PROTECTED] wrote:
>
> Pablo,
> Did you make the server cerificate yourself?
> Assuming you flagged it
> for IE and NC global_id if so then the browser will
> only step-up to strong
> (128bit) encryption if the certificate that signed
> it is also in the
> browser and has been flagged as a server-gated CA
> certificate, if you
> import the CA certificate into your browser then it
> will lose the
> server-gated flag. AFAIK the only way to flag a CA
> certificate as
> server-gated is to run a patching program after
> installing the CA
> certificate into the browser (IE dev kit?). There's
> some more info in the
> MOD_SSL docs about this.
> If you bought the GLOBAL_ID certificate (from
> Verisign/thawte etc) but
> it does not step up then the most likely thing is
> that you have not
> installed an intermediate CA certificate into
> Apache/MOD_SSL, this is a
> common mistake - also note this is the
> SSLCertificateChainFile directive.
> The reason why your Linux 4.75 gives strong
> encryption is probably
> because it is not encryption crippled (Help... About
> Communicator, does is
> say "This version supports U.S. security" and you
> won't get 40bit unless
> you turn off the ciphers in the browser or server.
> Mikey
>
__________________________________________________
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
