Hi all,

I have noticed that the SSL_OP_NETSCAPE_CA_DN_BUG option
enables to modify slightly the DER-encoding of the CA's DNs
that a TLS server sends to a client during the 
SSL3_ST_SW_CERT_REQ_A/B phase of the handshake.

I suppose that it is for some NS Communicator versions but
how can the server detect that the client is
Netscape or IE at the handshake-time, namely before any
application traffic (HTTP in that case) is sent.  


Pierre De Boeck
Sr System Engineer
Mission Critical (Belgium)
Phone: +32 2 757 10 15  Fax: +32  2 759 276 0
email: [EMAIL PROTECTED]
                                      ///               
                                     (. .)           
---------------------------------oOO--(_)--OOo----------------------

BEGIN:VCARD
VERSION:2.1
N:De Boeck;Pierre;;;
FN:Pierre De Boeck
ORG:Mission Critical
TITLE:Sr System Engineer
TEL;WORK;VOICE:+32 (2) 757.10.15
TEL;HOME;VOICE:+32 2 7594496
TEL;WORK;FAX:+32 2 759 27 60
ADR;WORK:;;Avenue Claire 27;Waterloo;;1410;Belgium
LABEL;WORK;ENCODING=QUOTED-PRINTABLE:Avenue Claire 27=0D=0AWaterloo,  1410=0D=0ABelgium
ADR;HOME:;;Dekenijstraat 21 BUS;;6;;Belgium
LABEL;HOME;ENCODING=QUOTED-PRINTABLE:Dekenijstraat 21 BUS=0D=0A, 6 =0D=0ABelgium
EMAIL;PREF;INTERNET:[EMAIL PROTECTED]
REV:19990421T075946Z
END:VCARD

smime.p7s

Reply via email to